CVE-2025-8177LibTIFF thumbnail.c setrow buffer overflow

Beschreibung

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-317591 | LibTIFF thumbnail.c setrow buffer overflow vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-317591 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #621797 | LibTIFF v4.7.0 Buffer Overflow third-party-advisoryThird Party AdvisoryVDB Entry
• https://gitlab.com/libtiff/libtiff/-/issues/715 issue-trackingExploitIssue TrackingVendor Advisory
• https://gitlab.com/libtiff/libtiff/-/merge_requests/737 patchProduct
• https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22 patchPatch
• http://www.libtiff.org/ productProduct