CVE-2025-8961LibTIFF tiffcrop tiffcrop.c main memory corruption

Beschreibung

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-319955 | LibTIFF tiffcrop tiffcrop.c main memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-319955 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #627957 | libtiff tiffcrop 4.7.0 (the newest master) Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
• https://gitlab.com/libtiff/libtiff/-/issues/721 issue-trackingExploitIssue TrackingVendor Advisory
• https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960 issue-trackingExploitIssue TrackingVendor Advisory
• https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing exploitExploit
• http://www.libtiff.org/ productProduct