756 matches found
libtiff: libtiff: Denial of Service via buffer overflow
A denial of service flaw has been found in libtiff. This stack-based buffer overflow occurs in tiffcrop part of libtiff within the function readSeparateStripsIntoBuffer. When processing a malformed TIFF directory e.g., improper tags/order, missing StripByteCounts, the function overflows a...
libtiff: libtiff: Denial of service via double free in tiffcrop.c
A denial of service flaw via segmentation fault has been found in libtiff. This segmentation fault vulnerability is caused by accessing invalid or corrupted memory addresses during memory deallocation operations. The root issue lies in the cleanup logic of the main function where the program...
CLSA-2026-1774273237 libtiff: Fix of CVE-2025-61143
CVE-2025-61143: fix NULL pointer dereference in tiffcrop add null checks and pointer validation, prevent crash...
Medium: compat-libtiff3
Issue Overview: libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. CVE-2025-61145 A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file tiffcrop.c of the component tiffcrop. The manipulation leads to memory...
CLSA-2026-1773829377 libtiff: Fix of CVE-2025-61145
CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing readptr after free...
EulerOS Virtualization 2.12.1 : libtiff (EulerOS-SA-2026-1441)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PSLvl2page of the fil...
CLSA-2026-1773051259 libtiff: Fix of CVE-2025-61143
CVE-2025-61143: fix OOB in tiffdither and fix null pointer dereference in tiffcrop...
CLSA-2026-1772574874 libtiff: Fix of CVE-2025-61144
CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...
CLSA-2026-1772642268 libtiff: Fix of CVE-2025-61145
CVE-2025-61145: fix double free in tiffcrop; add pointer validation and guard against second free...
CLSA-2026-1772622084 libtiff: Fix of CVE-2025-61144
CVE-2025-61144: add MAXSAMPLES bounds check in combineSeparateSamplesBytes to prevent stack-based buffer overflow when spp exceeds MAXSAMPLES in tiffcrop...
CLSA-2026-1772575082 libtiff: Fix of CVE-2025-61144
CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop...
SUSE CVE-2025-61145
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...
OESA-2026-1441 libtiff security update
This provides support for the Tag Image File Format TIFF, a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff...
Double Free
Overview Affected versions of this package are vulnerable to Double Free via the tiffcrop.c component. An attacker can cause a crash or potentially execute arbitrary code by triggering a double free condition. Remediation Upgrade libtiff to version 4.7.1 or higher. References - GitHub Gist - GitL...
Linux Distros Unpatched Vulnerability : CVE-2025-61145
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. CVE-2025-61145 Note that Nessus relies on the presence of the...
AZL-78314 CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...
CVE-2025-61145
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...
CVE-2025-61145
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...
