Heap-Based Buffer Over-read

libtiff.so is vulnerable to heap-based buffer over-reads. The vulnerability exists due to a flaw in the TIFFWriteScanline function of tifwrite.c...

CVE-2018-10779

TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...

CVE-2018-10779

CVE-2018-10779 is a LibTIFF vulnerability describing a heap-based buffer over-read in TIFFWriteScanline (tif_write.c) of LibTIFF 3.8.2, with bmp2tiff used as demonstration. The connected sources corroborate this issue and list related advisories, but do not provide any public exploit details with...

CVE-2018-10779

TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff...

LibTIFF tif_write.c Heap Buffer Overflow Vulnerability

Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains a number of command-line tools for processing TIFF files. A security vulnerability exists in libtiff version 4.0.6 in tifwrite.c, which can be exploit...

Heap overflow

tifwrite.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1 that didn't reset the tifrawcc and tifrawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."...

CVE-2016-9534

CVE-2016-9534 affects libtiff 4.0.6 where TIFFFlushData1() in tif_write.c does not reset tif_rawcc/tif_rawcp on the error path, creating a heap-buffer-overflow condition. Upstream and multiple advisories document this as a heap-based overflow that can enable DoS or potentially arbitrary code exec...