8471 matches found
EUVD-2026-76166
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...
CVE-2026-18495
CVE-2026-18495 is a heap-buffer overflow in the tiff2pdf utility within libtiff , triggered by an integer truncation error when processing a crafted BigTIFF file. A 64-bit StripByteCounts value is truncated to 32 bits, causing an undersized memory allocation followed by an out-of-bounds copy, lea...
CVE-2026-18495
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...
CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...
CVE-2026-18495
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...
CVE-2026-18495: Heap-based Buffer Overflow
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit StripByteCounts value to be truncated to a 32-bit...
Fedora 45 : tkimg (2026-a23a377e11)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a23a377e11 advisory. Update to 2.1.1, update bundled libtiff to 4.7.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
PT-2026-89997
Name of the Vulnerable Software and Affected Versions libtiff affected versions not specified Description A heap-buffer overflow occurs in the tiff2pdf utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file that...
EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2026-3280)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image...
EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2026-3355)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image...
NewStart CGSL MAIN 7.02 : libtiff Multiple Vulnerabilities (NS-SA-2026-0088)
The remote NewStart CGSL host, running version MAIN 7.02, has libtiff packages installed that are affected by multiple vulnerabilities: - A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of th...
Exploit for Out-of-bounds Write in Libtiff
CVE-2023-52356 – libtiff TIFFReadRGBATileExt Analysis Over...
The vulnerability of the process_command_opts() function in the libtiff library, which allows a hacker to execute arbitrary code.
The vulnerability of the processcommandopts function in the libtiff library is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
OESA-2026-3655 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
OESA-2026-3654 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
Fedora 44 : tkimg (2026-a6d01967c6)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a6d01967c6 advisory. Update to 2.1.1, update bundled libtiff to 4.7.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 43 : tkimg (2026-993b0ea146)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-993b0ea146 advisory. Update to 2.1.1, update bundled libtiff to 4.7.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
CVE-2017-12426
creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:12+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-28 00:00:56+00:00| seen| Telegram/SVZvTdeqqmSRakJEIQhn4CjyThzPklzbZgbnjRRXOSeUVHM 2026-08-29 00:00:14+00:00| published-proof-of-concept|...
