7221 matches found
CVE-2025-55891
CVE-2025-55891: 不正なTIFFファイルによるTIFFCP.EXE（docuPrinter Pro）のヒープ破損 概要 Neevia docuPrinter Pro に同梱されているコマンドラインユーティリティ TIFFCP.EXE には、古く脆弱なバージョンのlibtiff（v3.5.7）を使用していることに起因するヒープ破損の脆弱性が存在します。攻撃者は、特別に細工されたTIFFファイルを供給することで、LZW解凍中にセグメンテーションフォルトを引き起こすことができます。 この問題は、オープンソースのlibtiff 3.5.7からコンパイルされた tiffcp...
Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2026:1785753237)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785753237 advisory. - A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF...
Rocky Linux 9 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_19363)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619363 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the precedi...
CentOS Linux 7 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (CENTOS7:CLSA-2026:1785418348)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1785418348 advisory. - A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image...
Rocky Linux 9 [CIQ] Security Update: libtiff / libtiff-debuginfo / libtiff-debugsource / libtiff-devel / etc (crlsa-2026_12271)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202612271 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the precedi...
Rocky Linux 8 [CIQ] Security Update: mingw32-libtiff / mingw32-libtiff-debuginfo / etc (crlsa-2026_14929)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202614929 advisory. libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing CVE-2026-4775 Tenable has extracted the precedi...
Rocky Linux 9.6 [TuxCare] Security Update: cups-filters / cups-filters-devel / cups-filters-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772638779)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772638779 advisory. - CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former...
AlmaLinux 9.2 [TuxCare] Security Update: LibRaw / LibRaw-devel / LibRaw-samples / LibRaw-static (ALMALINUX9.2:CLSA-2026:1785515066)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785515066 advisory. - A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikonloadpaddedpackedraw of the file...
Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools (ALMALINUX9.6:CLSA-2025:1765546516)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1765546516 advisory. - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. Thi...
CVE-2025-43300
CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG 이미지 처리 메모리 손상 요약 Apple의 이미지 처리RawCamera.bundle의 취약점은 iOS 18.6.1 및 macOS 에 영향을 미칩니다. 이 문제는 DNG 파일에 불일치하는 TIFF 메타데이터 와 JPEG 무손실 매개변수 가 포함될 때 발생하여 메모리 손상을 초래합니다. 원인 TIFF 헤더는 SamplesPerPixel예상 채널 수을 정의합니다. JPEG 무손실은 SOF3 구성 요소 수실제 채널 수를 정의합니다. 이들이 일치하지 않으면...
CVE-2026-96418
A flaw was found in Wireshark. By convincing a user to open a specially crafted packet capture containing Tagged Image File Format TIFF data, an attacker can trigger an infinite loop in the TIFF protocol dissector. This issue causes the application to hang and become unresponsive, resulting in a...
ROOT-OS-ALPINE-323-CVE-2026-4775 CVE-2026-4775 in tiff - Patched by Root
Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.23. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2025-8176 CVE-2025-8176 in tiff - Patched by Root
Root has patched CVE-2025-8176 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2026-4775 CVE-2026-4775 in tiff - Patched by Root
Root has patched CVE-2026-4775 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2025-8177 CVE-2025-8177 in tiff - Patched by Root
Root has patched CVE-2025-8177 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2025-61144 CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available...
CVE-2026-96418
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
AZL-105021 CVE-2026-96418 affecting package wireshark 4.4.7-2
TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...