PT-2025-48100

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.4.0 Description pypdf is a free and open-source pure-python PDF library. An attacker can create a malicious PDF file that causes excessive memory consumption, up to 1 GB per stream, when parsing the content stream of ...

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from improper memory usage when parsing page content streams using the LZWDecod...

EUVD-2017-7764

Malware in sbrugna...

EUVD-2018-10377

Malware in sbrugna...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680619)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680619 advisory. LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For...

EulerOS Virtualization 2.11.1 : libtiff (EulerOS-SA-2023-2729)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local...

EulerOS Virtualization 2.11.0 : libtiff (EulerOS-SA-2023-2760)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2694)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to cra...

The vulnerability of the LZWDecode function in the libtiff/tif_lzw.c component of the LibTIFF library, which allows a hacker to cause a service failure.

The vulnerability of the LZWDecode function in the libtiff/tiflzw.c component of the LibTIFF library is related to reading data beyond the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created TIF file...

SUSE SLED15: libtiff-devel / libtiff-devel-32bit / libtiff5 / libtiff5-32bit / etc (SUSE-SU-2023:4869-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4869-1 advisory. - CVE-2023-2731: Fix null pointer deference in LZWDecode bsc1211478. - CVE-2023-1916: Fix...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2023-2760)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2023-329)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-329 advisory. A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to...

OESA-2023-1316 libtiff security update

This libtiff provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libti...

NULL Pointer Dereference

libtiff.so is vulnerable to a NULL Pointer Dereference. The vulnerability exists due to the LZWDecode function in libtiff/tiflzw.c, which allows an attacker to decompress a crafted TIFF file, resulting in a application crash...

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file resulting in a program crash or denial of service.

...

LibTIFF Denial of Service Vulnerability (CNVD-2023-43231)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A denial of service vulnerability exists in LibTIFF, which stems from a NULL pointer dereference issue found in the LZWDecode function, and c...

AZL-26756 CVE-2023-2731 affecting package libtiff for versions less than 4.5.0-3

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

AZL-45003 CVE-2023-2731 affecting package openjpeg2 2.3.1-12

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

AZL-43795 CVE-2023-2731 affecting package openjpeg2 2.3.1-12

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...

CVE-2023-2731

A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or...