JLSEC-2025-252 An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/ti...

An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tifdirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file...

The vulnerability of the TIFFWriteDirectoryTagTransferfunction function in software for viewing, editing, and converting TIFF files arises from the possibility of an operation exceeding the permissible buffer data size. This vulnerability allows attackers to cause service failures.

The vulnerability of the TIFFWriteDirectoryTagTransferfunction function in software for viewing, editing, and converting TIFF files is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...