LibTIFF extractContigSamples32bits function DoS

The vulnerability of the extractContigSamples32bits function in the LibTIFF library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure using specially created data...

LibTIFF Heap Buffer Overflow DoS

The vulnerability of the LibTIFF library is related to the escape of operations beyond the buffer during the processing of TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS parameters. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-26966

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to an out-of-bounds read in the uvencode function in libtiff/tifluv.c, resulting in a denial of service...

CVE-2023-25433

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to a heap-based buffer overflow in the processCropSelections function in tools/tiffcrop.c, resulting in a denial of service...

Buffer Overflow

libtiff.so is vulnerable to Buffer Overflows. The vulnerability exists in uvencode function at tifluv.c when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian resulting in an application crash...

CVE-2023-3576

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denia...

LibTIFF LZWDecode Buffer Overflow DoS

The vulnerability of the LZWDecode function libtiff/tiflzw.c in the LibTIFF library is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure using specially created input data...

Moderate Photon OS Security Update - PHSA-2023-3.0-0610

Updates of 'libtiff' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-91-0044

Updates of 'libtiff', 'fuse-overlayfs-snapshotter', 'nerdctl' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0044

Updates of 'fuse-overlayfs-snapshotter', 'nerdctl', 'libtiff' packages of Photon OS have been released...

CVE-2023-25435

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to a heap-based buffer overflow in the extractContigSamplesShifted8bits function in tools/tiffcrop.c, resulting in a denial of service...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2298)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1 CVE-2022-2519 - A flaw was found in libtiff...

Moderate Photon OS Security Update - PHSA-2023-3.0-0607

Updates of 'libtiff' packages of Photon OS have been released...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2274)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1 CVE-2022-2519 - A flaw was found in libtiff...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2298)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Libtiff: null pointer dereference in tif_dir.c

...

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

...

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.

...

SUSE CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage in tiffcrop cause heap-buffer-overflow and SEGV...