CVE-2016-9535

tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...

CVE-2016-9539

tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...

CVE-2016-9539

tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...

CVE-2016-9538

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

CVE-2016-9536

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip. Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."...

CVE-2016-9535

tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...

CVE-2016-9534

tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...

Out-of-bounds

tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer. Reported as MSVR 35092...

Integer overflow

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

Heap overflow

tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...

Heap overflow

tifpixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."...

Heap overflow

tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...

CVE-2016-9536

CVE-2016-9536 affects libtiff 4.0.6; a heap-based out-of-bounds write occurs in tiff2pdf.c (t2p_process_jpeg_strip) enabling potential arbitrary code execution or denial of service when processing crafted TIFFs. Upstream fixed in 4.0.7; advisories (Debian DSA-3762-1, Debian DLA-795-1, CentOS/Red ...

CVE-2016-9539

CVE-2016-9539: In LibTIFF 4.0.6, tools/tiffcrop.c reads an out-of-bounds buffer in readContigTilesIntoBuffer(), yielding a potential crash or memory corruption when processing crafted TIFF files. Connected advisories enumerate LibTIFF 4.x variants with multiple related issues, but do not provide ...

CVE-2016-9538

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer because of a uint16 integer overflow. Reported as MSVR 35100...

CVE-2016-9533

Technical details about CVE-2016-9533 are not publicly provided in the connected documents. The initial description notes a heap-based out-of-bounds write in libtiff 4.0.6 PixarLog, but no vendor/impact/version details beyond that. Monitor for updates.

CVE-2016-9540

CVE-2016-9540 affects LibTIFF 4.0.6 and related tools. The vulnerability is an out-of-bounds write in the tiffcp component when handling tiled images with odd tile width vs image width, potentially enabling crash or arbitrary code execution. The issue is categorized as a heap-buffer-overflow (cpS...

CVE-2016-9535

tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."...

CVE-2016-9538

CVE-2016-9538 is a LibTIFF/tiffcrop issue; LibTIFF 4.0.6’s tools/tiffcrop.c reads an undefined buffer in readContigStripsIntoBuffer due to a uint16 overflow (MSVR 35100). The EulerOS/Nessus entries list this CVE among LibTIFF-related problems and confirm the affected component and function, but t...

CVE-2016-9537

CVE-2016-9537 is an out-of-bounds write in LibTIFF 4.0.6 (tools/tiffcrop.c) used when processing TIFF images, with potential for denial of service or arbitrary code execution. Multiple vendor advisories (Debian DLA-795-1, CentOS/RH updates, Ubuntu USN-3212-1, Arch ASA-201611-26/27, ASA) indicate ...