Lucene search
K

24 matches found

OSV
OSV
added 2025/11/25 10:18 p.m.1 views

JLSEC-2025-255 A flaw was found in libtiff

A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

5.5CVSS6.5AI score0.00073EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.31 views

Rocky Linux 8 : libtiff (RLSA-2021:4241)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4241 advisory. - A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

7.8CVSS7.6AI score0.0048EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 3:51 a.m.1 views

SUSE CVE-2020-35521

A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

4.4CVSS6.4AI score0.00073EPSS
Exploits0References8
Microsoft CVE
Microsoft CVE
added 2021/03/13 8:0 a.m.1 views

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c a crafted TIFF file can lead to an abort resulting in denial of service.

...

5.5CVSS7AI score0.00073EPSS
Exploits0
CNVD
CNVD
added 2021/03/10 12:0 a.m.24 views

LibTIFF Memory Allocation Failure Vulnerability (CNVD-2022-05533)

Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A memory allocation failure vulnerability exists in tifread.c in libtiff. An attacker could exploit this vulnerability to cause an abort via a specially crafted TIFF document, which could result in a...

5.5CVSS6.2AI score0.00073EPSS
Exploits0References1
NVD
NVD
added 2021/03/09 8:15 p.m.20 views

CVE-2020-35521

A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

5.5CVSS0.00073EPSS
Exploits0References4
OSV
OSV
added 2021/03/09 8:15 p.m.0 views

AZL-6652 CVE-2020-35521 affecting package libtiff for versions less than 4.1.0-3

A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

5.5CVSS6.7AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2021/03/09 8:15 p.m.1 views

ALPINE-CVE-2020-35521

A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...

5.5CVSS6.4AI score0.00073EPSS
Exploits0References1
Veracode
Veracode
added 2018/05/22 8:42 a.m.26 views

Denial Of Service (DoS) Through Divide By Zero

libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the TIFFReadEncodedStrip function in tifread.c to cause a divied by zero that can crash the application...

5.5CVSS6.4AI score0.00347EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2017/08/21 12:0 a.m.2 views

LibTIFF 'TIFFReadDirEntryArray' Function Denial of Service Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the 'TIFFReadDirEntryArray' function in the tifread.c fil...

7.5CVSS7.5AI score0.0074EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2017/04/11 1:48 p.m.22 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS5.3AI score0.00227EPSS
Exploits0References1
Prion
Prion
added 2017/04/09 2:59 p.m.23 views

Design/Logic Flaw

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

4.3CVSS5.8AI score0.00227EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2017/04/09 2:59 p.m.22 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS6.1AI score
Exploits0References5
NVD
NVD
added 2017/04/09 2:59 p.m.15 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS6.3AI score0.00227EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2017/04/09 2:0 p.m.24 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS6.3AI score0.00227EPSS
Exploits0
Cvelist
Cvelist
added 2017/04/09 2:0 p.m.18 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

6.4AI score0.00227EPSS
Exploits0References5
CVE
CVE
added 2017/04/09 2:0 p.m.124 views

CVE-2017-7593

LibTIFF 4.0.7 contains a vulnerability in tif_read.c where tif_rawdata may not be properly initialized, enabling a remote attacker to leak sensitive process memory via a crafted TIFF image. Connected advisories show upstream fixes implemented in LibTIFF 4.0.7 and distribution patches in Debian, A...

5.5CVSS5.8AI score0.00227EPSS
Exploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2017/04/09 12:0 a.m.25 views

CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS6.9AI score0.00227EPSS
Exploits0References2
OSV
OSV
added 2017/04/09 12:0 a.m.0 views

UBUNTU-CVE-2017-7593

tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...

5.5CVSS6.8AI score0.00227EPSS
Exploits0References3
Prion
Prion
added 2016/10/03 4:9 p.m.14 views

Out-of-bounds

tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...

4.3CVSS6.9AI score0.00339EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder