24 matches found
JLSEC-2025-255 A flaw was found in libtiff
A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
Rocky Linux 8 : libtiff (RLSA-2021:4241)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4241 advisory. - A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
SUSE CVE-2020-35521
A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c a crafted TIFF file can lead to an abort resulting in denial of service.
...
LibTIFF Memory Allocation Failure Vulnerability (CNVD-2022-05533)
Libtiff is a library for reading and writing Tagged Image File Format abbreviated TIFF files. A memory allocation failure vulnerability exists in tifread.c in libtiff. An attacker could exploit this vulnerability to cause an abort via a specially crafted TIFF document, which could result in a...
CVE-2020-35521
A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
AZL-6652 CVE-2020-35521 affecting package libtiff for versions less than 4.1.0-3
A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
ALPINE-CVE-2020-35521
A flaw was found in libtiff. Due to a memory allocation failure in tifread.c, a crafted TIFF file can lead to an abort, resulting in denial of service...
Denial Of Service (DoS) Through Divide By Zero
libtiff.so is vulnerable to denial of service DoS attacks. A malicious user can pass a tiff file to the TIFFReadEncodedStrip function in tifread.c to cause a divied by zero that can crash the application...
LibTIFF 'TIFFReadDirEntryArray' Function Denial of Service Vulnerability
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in the 'TIFFReadDirEntryArray' function in the tifread.c fil...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
Design/Logic Flaw
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
CVE-2017-7593
LibTIFF 4.0.7 contains a vulnerability in tif_read.c where tif_rawdata may not be properly initialized, enabling a remote attacker to leak sensitive process memory via a crafted TIFF image. Connected advisories show upstream fixes implemented in LibTIFF 4.0.7 and distribution patches in Debian, A...
CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
UBUNTU-CVE-2017-7593
tifread.c in LibTIFF 4.0.7 does not ensure that tifrawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a crafted image...
Out-of-bounds
tifread.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF image...