CVE-2023-25434

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes at /libtiff/tools/tiffcrop.c:3215...

CVE-2023-26965

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

AZL-44907 CVE-2023-30774 affecting package openjpeg2 2.3.1-12

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

UBUNTU-CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

CVE-2023-30775

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

Heap-based Buffer Overflow

libtiff.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists in extractContigSamples32bits. tiffcrop.c which allows an attacker to cause a buffer overflow resulting in an application crash...

Heap-based Buffer Overflow

libtiff.so is vulnerable to Heap-based Buffer Overflow. The vulnerability exists via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values which allows an attacker to cause a buffer overflow resulting in an application crash...

libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c

An out-of-bounds write flaw was found in the TIFFmemcpy function in libtiff/tifunix.c in the libtiff package. By persuading a victim to open a specially-crafted TIFF image file, a remote attacker could cause a denial of service condition...

libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...

libtiff: Heap buffer overflow in tiffcp() at tiffcp.c

A vulnerability was found in the libtiff library. This flaw causes a buffer overflow in libtiff that allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c...

PT-2023-3429 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: The issue is related to a NULL pointer dereference flaw in the LZWDecode function, located in the libtiff/tif lzw.c file. This flaw can be exploited by a local attacker who crafts specific...

Out-of-bounds Read

libtiff.so is vulnerable to Out-of-bounds Read. The vulnerability exists due to a heap based buffer overflow in extractImageSection function in tiffcrop.c which allows an attacker to submit a malicious code file into the system and perform out of read...

SUSE CVE-2023-30775

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c...

PT-2023-3451 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: libtiff affected versions not specified Description: The issue is related to a heap buffer overflow in the libtiff library when processing the TIFFTAG INKNAMES and TIFFTAG NUMBEROFINKS parameters. This can lead to a denial of service or...

PT-2023-3450 · Libtiff +5 · Libtiff +5

Name of the Vulnerable Software and Affected Versions: libtiff affected versions not specified Description: A security flaw in the libtiff library causes a heap buffer overflow in the extractContigSamples32bits function, located in tiffcrop.c. This issue can be exploited by an attacker using...

LibTIFF Out-of-Bounds Read Vulnerability (CNVD-2023-31159)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. LibTIFF suffers from an out-of-bounds read vulnerability that stems from a lack of proper validation of user-supplied data, where specially...

AZL-26152 CVE-2023-1916 affecting package libtiff for versions less than 4.5.1-1

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff...

PT-2023-4906 · Libtiff +6 · Libtiff +6

Name of the Vulnerable Software and Affected Versions: libtiff versions 4.x Description: The issue is related to a flaw in the extractImageSection function of the libtiff library, which can cause an out-of-bounds read in memory. This can lead to a denial of service and limited information...

PT-2023-5345

Name of the Vulnerable Software and Affected Versions Libtiff affected versions not specified Description A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop...