53 matches found
pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding
A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...
pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding
A flaw was found in Pillow. When processing Tagged Image File Format TIFF images, the library fails to properly validate buffer boundaries during tile and color decoding routines. A remote attacker could exploit this vulnerability by supplying a specially crafted TIFF file with conflicting metada...
Red Hat: CVE-2026-112897: pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding
Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The decodeStrip and decodeTile buffers can be larger than the bytes written by libtiff, but Pillow conver...
Red Hat: CVE-2026-112404: pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding
Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In decodeTile and the RGBA unpacker path, when Pillow and libtiff interpret duplicated PhotometricInterpretation or BitsPerSample tags differently,...
EUVD-2026-93770
ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write...
CVE-2026-106118
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore...
CVE-2026-106118
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore...
PT-2026-106839
Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description In the tiled TIFF decoding process, a destination buffer is allocated using TileWidth, but the TiffDecompressorsFactory.Create function constructs T4, T6, and Modified Huffman decompressors...
CVE-2026-106118: Out-of-bounds Write
ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore...
libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
CVE-2026-35591 Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...
CVE-2026-33809
The golang.org/x/image/tiff library in the Go programming language is vulnerable to an out-of-memory error or excessive resource consumption. A maliciously crafted TIFF file can cause the image decoding process to attempt to allocate up to 4GiB of memory . This flaw is related to the unlimited lo...
MiracleLinux 3 : cups-1.3.7-8.4.1AXS3 (AXSA:2009-44:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-44:01 advisory. The Common UNIX Printing System provides a portable printing layer for UNIX operating systems. It has been developed by Easy Software Products to...
EUVD-2020-0134
Malware in sbrugna...
EUVD-2020-6110
Malware in sbrugna...
Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680618)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680618 advisory. LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tiflzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For...
BIT-PILLOW-2020-5310
libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...
SUSE CVE-2016-2329
libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via a crafted TIFF file, related to th...