Fedora 44 : libtiff (2025-c612cbc58f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c612cbc58f advisory. Automatic update for libtiff-4.7.0-8.fc44. Changelog Mon Aug 25 2025 Michal Hlavinka - 4.7.0-8 - fix CVE-2025-9165: memory leak in tiffcmp rhbz23896...

Linux Distros Unpatched Vulnerability : CVE-2016-3634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tagCompare function in tifdirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds re...

Linux Distros Unpatched Vulnerability : CVE-2016-3625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

Linux Distros Unpatched Vulnerability : CVE-2019-7663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tifdirwrite.c in LibTIFF 4.0.10, affecting the...

Fedora 43 : libtiff (2025-ebff4d54bf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ebff4d54bf advisory. Automatic update for libtiff-4.7.0-8.fc43. Changelog Mon Aug 25 2025 Michal Hlavinka - 4.7.0-8 - fix CVE-2025-9165: memory leak in tiffcmp rhbz23896...

Linux Distros Unpatched Vulnerability : CVE-2016-3620

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ZIPEncode function in tifzip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the -c zip option is used, allows remote attackers to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2016-3619

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DumpModeEncode function in tifdumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the -c none option is used, allows remote attackers to caus...

Linux Distros Unpatched Vulnerability : CVE-2016-3633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via vectors relat...

libtiff-devel-32bit-4.7.0-8.1 on GA media (moderate)

libtiff-devel-32bit-4.7.0-8.1 on GA media Announcement ID: openSUSE-SU-2025:15487-1 Rating: moderate Cross-References: CVE-2024-13978 CVE-2025-8534 CVE-2025-9165 CVSS scores: CVE-2024-13978 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-13978 SUSE : 5.7...

libtiff:tiff_read_rgba_fuzzer: Heap-buffer-overflow in null_convert

Project: https://gitlab.com/libtiff/libtiff.git Detailed Report: https://oss-fuzz.com/testcase?key=6296343523164160 Project: libtiff Fuzzing Engine: afl Fuzz Target: tiffreadrgbafuzzer Job Type: aflasanlibtiff Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x5020000001...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : LibTIFF vulnerabilities (USN-7707-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7707-1 advisory. It was discovered that LibTIFF incorrectly handled certain memory operations when usi...

Ubuntu: Security Advisory (USN-7707-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15486-1 libtiff-devel-32bit-4.7.0-8.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.0-8.1 package on the GA media of openSUSE Tumbleweed...

Null Pointer Dereference

libtiff.so is vulnerable to Null Pointer Dereference. The vulnerability is due to improper handling in the t2preadtiffinit function of tools/tiff2pdf.c in the fax2ps component, which allows a local attacker to trigger a null pointer dereference under complex conditions...

Linux Distros Unpatched Vulnerability : CVE-2025-8534

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the file tools/tiff2ps.c of the...

SUSE CVE-2025-9165

A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...

USN-7707-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. CVE-2025-8176 It was discovered that LibTIFF did...

USN-7707-1 tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. CVE-2025-8176 It was discovered that LibTIFF did...

LibTIFF Buffer Overflow Vulnerability

LibTIFF is LibTIFF open source a library to read and write TIFF Tagged Image File Format files , the library contains a number of command-line tools to deal with TIFF files . LibTIFF has a buffer overflow vulnerability that originates from an incorrect operation of the file tiffcrop.c, which can ...

Linux Distros Unpatched Vulnerability : CVE-2024-13978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2preadtiffinit of the fil...