PT-2026-41618

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the 'in TIFFmemcpy' funtion in the component 'tif unix.c'...

PT-2025-55410

The TIFFFdOpen function in tif unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb...

PT-2025-55417

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tif unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field...

PT-2025-55441

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tif unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...

PT-2018-10113

Name of the Vulnerable Software and Affected Versions LibTIFF version 3.8.2 Description The issue is related to memory leaks in the TIFFClientOpen function, located in the tif unix.c file of LibTIFF. This has been demonstrated using the bmp2tiff tool. Recommendations For LibTIFF version 3.8.2, at...

PT-2017-7839

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.0alpha4 through 4.0.7 Description The issue allows remote attackers to cause a denial of service or possibly have other impacts via a crafted TIFF image. This is related to a heap-based buffer over-read in the libtiff/tif...

PT-2017-7838

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.7 Description The issue allows remote attackers to cause a denial of service, potentially leading to an integer underflow and heap-based buffer under-read, via a crafted TIFF image. This is related to a "READ of size 78490"...

PT-2016-4576

Name of the Vulnerable Software and Affected Versions LibTIFF versions 3.9.3 through 4.0.6 Description The issue is related to a heap-based buffer overflow in the readContigStripsIntoBuffer function in tif unix.c. This allows remote attackers to have an unspecified impact via a crafted image...