LibTIFF 安全漏洞

LibTIFF is an open-source library for reading and writing TIFF Tagged Image File Format files. This library includes some command-line tools for processing TIFF files. Versions of LibTIFF prior to v4.7.1 have security vulnerabilities, which stem from a double-freeing issue in the tools/tiffcrop.c...

LibTIFF 安全漏洞

LibTIFF is an open-source library for reading and writing TIFF Tagged Image File Format files. This library includes some command-line tools for processing TIFF files. Versions of LibTIFF prior to v4.7.1 have security vulnerabilities, which stem from a null pointer dereferencing in the component...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61143

CVE-2025-61143 and CVE-2025-61144 affect libtiff up to 4.7.1, causing NULL pointer dereference (tif_open.c) and stack overflow (readSeparateStripsIntoBuffer). Connected advisories indicate multiple vendors released fixes (e.g., Mageia MGASA-2026-0105, SUSE SU-2026-1407/1408, Amazon ALAS2-2026-319...

CVE-2025-61145

CVE-2025-61145 affects libtiff up to 4.7.1, with a double free in tools/tiffcrop.c. The vulnerability exposes a memory corruption risk (availability impact High) and is described as locally exploitable with low complexity; user interaction is required. The documents provide no definitive fixed ve...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61144

CVE-2025-61144: libtiff up to v4.7.1 contains a stack overflow in readSeparateStripsIntoBuffer. Connected advisories (Unity Linux, SUSE, Amazon Linux, Ubuntu, Photon OS, etc.) confirm libtiff exposure and indicate fixed versions in their security updates. Affected: libtiff up to 4.7.1 on multiple...

CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the tifopen.c. An attacker can cause a crash of the application by triggering a NULL pointer dereference through crafted input files. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitLa...

Photon OS 4.0: Libtiff PHSA-2026-4.0-0959

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Critical Photon OS Security Update - PHSA-2026-4.0-0959

Updates of 'ImageMagick', 'libtiff', 'linux' packages of Photon OS have been released...

Photon OS 5.0: Libtiff PHSA-2026-5.0-0757

An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0757. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...