Medium: compat-libtiff3

Issue Overview: libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. CVE-2025-61145 A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the component tiffcrop. The manipulation leads to memory...

CLSA-2026-1773829377 libtiff: Fix of CVE-2025-61145

CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing readptr after free...

EulerOS Virtualization 2.12.0 : libtiff (EulerOS-SA-2026-1498)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the fil...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2026-1498)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2026-1441)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CLSA-2026-1773051259 libtiff: Fix of CVE-2025-61143

CVE-2025-61143: fix OOB in tiffdither and fix null pointer dereference in tiffcrop...

CLSA-2026-1772574874 libtiff: Fix of CVE-2025-61144

CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...

CLSA-2026-1772642268 libtiff: Fix of CVE-2025-61145

CVE-2025-61145: fix double free in tiffcrop; add pointer validation and guard against second free...

CLSA-2026-1772575082 libtiff: Fix of CVE-2025-61144

CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...

SUSE CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...

SUSE CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function...

SUSE CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...

OESA-2026-1442 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

OESA-2026-1441 libtiff security update

This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...

CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12

CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12. A patched version of the package is available...

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

...

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

...