7869 matches found
CVE-2016-9538
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...
CVE-2016-9540
CVE-2016-9540 affects LibTIFF 4.0.6 and related tools. The vulnerability is an out-of-bounds write in the tiffcp component when handling tiled images with odd tile width vs image width, potentially enabling crash or arbitrary code execution. The issue is categorized as a heap-buffer-overflow (cpS...
CVE-2016-9535
tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...
CVE-2016-9539
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...
CVE-2016-9533
Technical details about CVE-2016-9533 are not publicly provided in the connected documents. The initial description notes a heap-based out-of-bounds write in libtiff 4.0.6 PixarLog, but no vendor/impact/version details beyond that. Monitor for updates.
CVE-2016-9537
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097...
CVE-2016-9536
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...
CVE-2016-9537
CVE-2016-9537 is an out-of-bounds write in LibTIFF 4.0.6 (tools/tiffcrop.c) used when processing TIFF images, with potential for denial of service or arbitrary code execution. Multiple vendor advisories (Debian DLA-795-1, CentOS/RH updates, Ubuntu USN-3212-1, Arch ASA-201611-26/27, ASA) indicate ...
CVE-2016-9534
CVE-2016-9534 affects libtiff 4.0.6 where TIFFFlushData1() in tif_write.c does not reset tif_rawcc/tif_rawcp on the error path, creating a heap-buffer-overflow condition. Upstream and multiple advisories document this as a heap-based overflow that can enable DoS or potentially arbitrary code exec...
CVE-2016-9535
CVE-2016-9535 affects libtiff 4.0.6 (tif_predict.h/.c) and can trigger assertion failures in debug builds or buffer overflows in release builds when handling unusual tiles (e.g., YCbCr with subsampling). Several connected advisories confirm heap-buffer-overflow risks in LibTIFF 4.0.6 components (...
CVE-2016-9533
tifpixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."...
CVE-2016-9535
tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...
CVE-2016-9538
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...
CVE-2016-9539
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...
CVE-2016-9534
tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...
CVE-2016-9540
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."...
CVE-2016-9538
CVE-2016-9538 is a LibTIFF/tiffcrop issue; LibTIFF 4.0.6’s tools/tiffcrop.c reads an undefined buffer in readContigStripsIntoBuffer due to a uint16 overflow (MSVR 35100). The EulerOS/Nessus entries list this CVE among LibTIFF-related problems and confirm the affected component and function, but t...
CVE-2016-9536
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...