8902 matches found
PT-2025-55479
A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is...
PT-2025-55414
In LibTIFF, there is a memory malloc failure in tif pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack...
PT-2025-55410
The TIFFFdOpen function in tif unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb...
PT-2025-55475
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the publ...
PT-2025-55469
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...
AlmaLinux 10 : libtiff (ALSA-2025:20998)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:20998 advisory. libtiff: Libtiff Write-What-Where CVE-2025-9900 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...
Oracle Linux 9 : libtiff (ELSA-2025-20801)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20801 advisory. - backport documentation change for CVE-2023-52355 RHEL-17328 Tenable has extracted the preceding description block directly from the Oracle Linux...
PT-2025-55183
A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/ TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is...
PT-2025-55472
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libtiff (UTSA-2025-990944)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990944 advisory. A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function gethistogram of the file...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libtiff (UTSA-2025-990943)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990943 advisory. A flaw was found in Libtiff. This vulnerability is a write-what-where condition, triggered when the library processes a specially crafted TIFF image file. By providi...
EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2025-2449)
According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the file tools/tiff2ps...
EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2025-2438)
According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the file...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2438)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2025-2449)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TencentOS Server 3: libtiff (TSSA-2022:0252)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0252 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: libtiff (TSSA-2024:0336)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0336 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: libtiff (TSSA-2024:0194)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0194 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
AlmaLinux 9 : libtiff (ALSA-2025:20956)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:20956 advisory. libtiff: LibTIFF Use-After-Free Vulnerability CVE-2025-8176 libtiff: Libtiff Write-What-Where CVE-2025-9900 Tenable has extracted the preceding descripti...
