RHEL 8 : libtiff (RHSA-2025:19276)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19276 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Libtiff...

AlmaLinux 10 : libtiff (ALSA-2025:19156)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:19156 advisory. libtiff: Libtiff Write-What-Where CVE-2025-9900 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHSA-2025:19156 Red Hat Security Advisory: libtiff security update

Bulletin has no description...

libtiff security update

4.0.9-35 - fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented RHEL-112533...

OPENSUSE-SU-2025:15682-1 libtiff-devel-32bit-4.7.1-3.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.7.1-3.1 package on the GA media of openSUSE Tumbleweed...

ALSA-2025:19276 Important: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Libtiff Write-What-Where CVE-2025-9900 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-10

CVE-2024-13978 affecting package libtiff for versions less than 4.6.0-10. A patched version of the package is available...

RHSA-2025:19113 Red Hat Security Advisory: libtiff security update

Bulletin has no description...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libtiff: Libtiff Write-What-Where

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controll...

libtiff: LibTIFF Use-After-Free Vulnerability

A flaw was found in libtiff. The gethistogram function in file/tiffmedian.c exhibits a use-after-free condition when processing a specially crafted file, allowing a local attacker to trigger memory corruption. This manipulation results in a use-after-free vulnerability, and can lead to a denial o...

libtiff security update

4.4.0-13.2 - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither and tiffmedian - Resolves: RHEL-120243 4.4.0-13.1 - fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriented - Resolves: RHEL-112542...

Oracle Linux 10 : libtiff (ELSA-2025-19156)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-19156 advisory. 4.6.0-6.1 - Fix buffer underflow crash in TIFFReadRGBAImageOriented - Resolves: RHEL-112522 Tenable has extracted the preceding description block directly fro...

Oracle Linux 9 : libtiff (ELSA-2025-19113)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19113 advisory. - fix CVE-2025-8176 off-by-one error skipping first line in tiffdither and tiffmedian - fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriente...

RHEL 10 : libtiff (RHSA-2025:19156)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:19156 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Libtiff...

Amazon Linux 2 : compat-libtiff3, --advisory ALAS2-2025-3039 (ALAS-2025-3039)

The version of compat-libtiff3 installed on the remote host is prior to 3.9.4-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3039 advisory. A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the compone...