CVE-2025-8961LibTIFF tiffcrop tiffcrop.c main memory corruption

Description

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• VDB-319955 | LibTIFF tiffcrop tiffcrop.c main memory corruption vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
• VDB-319955 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredVDB Entry
• Submit #627957 | libtiff tiffcrop 4.7.0 (the newest master) Segmentation Fault third-party-advisoryThird Party AdvisoryVDB Entry
• https://gitlab.com/libtiff/libtiff/-/issues/721 issue-trackingExploitIssue TrackingVendor Advisory
• https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960 issue-trackingExploitIssue TrackingVendor Advisory
• https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing exploitExploit
• http://www.libtiff.org/ productProduct