Buffer Overflow

libtiff.so is vulnerable to buffer overflows. The application contains a bug with the fmt variable in the unixErrorHandler function in tifunix.c, allowing a malicious user to pass a TIFF file to crash the application...

LibTIFF heap buffer overflow vulnerability (CNVD-2018-14921)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A heap-based buffer overflow vulnerability exists in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 4.0.9. A remote attacker can exploit this vulnerability via specially crafted TIFF files ...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The embedded version of libjbig contains a memory malloc failure, allowing a malicious user to cause the application to crash by passing a pdf to the application...

Remote Code Execution (RCE)

libtiff.so is vulnerable to remote code execution RCE attacks. A malicious user can pass a tiff file to the TIFFGetField function in tifdir.c that can lead to a type confusion, crashing the application or potentially causing arbitrary code to be executed...

Denial Of Service (DoS) During TIFFOpen Process

libtiff.so is vulnerable to denial of service DoS. When the attacker can send a malicious input file, tdimagelength is directly derived from the input file length. Moreover, TIFFOpen function does not check tdimagelength during TIFFOpen process, allowing the attacker to trigger out-of-memory OOM...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the TIFFWriteDirectoryTagSubifd function in tifdirwrite.c to cause an assertion abort that can crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file that when cropped can cause a divide by zero error that can crash the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a TIFF file to the application to the TIFFReadDirectory method in tifdirread.c to cause a memory leak that can crash the application...

Information Disclosure

libtiff.so is vulnerable to information disclosure attacks. The vulnerability exists due to the possibility of accessing uninitialized buffers in TIFFReadBufferSetup of libtiff/tifread.c...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The vulnerability exists due to a memory leak in OJPEGReadHeaderInfoSecTablesAcTable of libtiff/tifojpeg.c that would cause a DoS attack when the leaked memory is accessed...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS attacks. The library fails to verify BitsPerSample in a given tiff file, allowing a malicious user to pass a tiff file to the application to cause an out-of-bounds write that can lead to code being executed or the application crashing...

Buffer Overflow

libtiff.so is vulnerable to buffer overflows. A malicious user can pass a tiff file to the LZWDecodeCompat function in tiflzw.c, causing a buffer overflow that can crash the application or other cause arbitrary code to be executed...

UBUNTU-CVE-2018-10963

The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...

Denial Of Service (DoS) Through Heap Buffer Overflow

libtiff.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in t2pprocessjpegstrip of tools/tiff2pdf.c where an out-of-bounds write would cause a heap-based buffer overflow which results in a DoS attack...

CVE-2018-10126

LibTIFF 4.0.9 has a NULL pointer dereference in the jpegfdct16x16 function in jfdctint.c...

Buffer Overread

libtiff.so is vulnerable to buffer overreads. The application does not properly validate biWidth and biHeight variable in bmp image headers which can cause buffer overreads in the application...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service DoS. It does not validate the declared number of directory entries with its actual number. Therefore, an attacker can launch the attack by sending a malicious TIFF file to TIFFSetDirectory function of tifdir.c, draining the resources...

ALPINE-CVE-2016-5314

Buffer overflow in the PixarLogDecode function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer wi...

CVE-2014-8129

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tifnext.c to verify that the BitsPerSample value is 2, and the t2psamplelabsignedtounsigned function in tiff2pdf...

DEBIAN-CVE-2018-5784

In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tifdir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated again...