libtiff Schwachstellen (CVE)

7.8Hoch

CVE-2026-4775 vor 7 Monaten

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to inco…

5.5Mittel

CVE-2025-61145 vor 8 Monaten

libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

9.8Kritisch

CVE-2025-61144 vor 8 Monaten

libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

5.5Mittel

CVE-2025-61143 vor 8 Monaten

libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

2.5Niedrig

CVE-2025-9165 vor 1 Jahr

LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

LibTIFF

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to l…

3.3Niedrig

CVE-2025-8961 vor 1 Jahr

LibTIFF tiffcrop tiffcrop.c main memory corruption

LibTIFF

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made availabl…

5.3Mittel

CVE-2025-8851 vor 1 Jahr

LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow

LibTIFF

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required t…

2.5Niedrig

CVE-2025-8534 vor 1 Jahr

libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference

libtiff

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the at…

2.5Niedrig

CVE-2024-13978 vor 1 Jahr

LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

LibTIFF

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. …

5.3Mittel

CVE-2025-8177 vor 1 Jahr

LibTIFF thumbnail.c setrow buffer overflow

LibTIFF

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6…

5.3Mittel

CVE-2025-8176 vor 1 Jahr

LibTIFF tiffmedian.c get_histogram use after free

LibTIFF

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …

7.5Hoch

CVE-2024-7006 vor 2 Jahren

Libtiff: null pointer dereference in tif_dirinfo.c

libtiff; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. …

1.5%EPSS

7.5Hoch

CVE-2023-52356 vor 2 Jahren

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

libtiff; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

2.7%EPSS

7.5Hoch

CVE-2023-52355 vor 2 Jahren

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

libtiff; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 9

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

1.8%EPSS

3.3Niedrig

CVE-2023-6228 vor 2 Jahren

Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

6.5Mittel

CVE-2023-6277 vor 2 Jahren

Libtiff: out-of-memory in tiffopen via a craft file

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

1.8%EPSS

6.5Mittel

CVE-2023-41175 vor 3 Jahren

Libtiff: potential integer overflow in raw2tiff.c

libtiff; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer o…

1.3%EPSS

5.5Mittel

CVE-2023-3576 vor 3 Jahren

Libtiff: memory leak in tiffcrop.c

Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an applicatio…

6.1Mittel

CVE-2023-1916 vor 3 Jahren

libtiff

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information discl…

5.5Mittel

CVE-2022-1354 vor 4 Jahren

libtiff

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a deni…