IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al

libtiff güvenlik açıkları (CVE)

libtiff için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

libtiff 15
15 sonuç
7.8Yüksek
CVE-2026-4775

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to inco…

5.5Orta
CVE-2025-61145
libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

9.8Kritik
CVE-2025-61144
libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

5.5Orta
CVE-2025-61143
libtiff libtiff

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

2.5Düşük
CVE-2025-9165

LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

LibTIFF

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to l…

3.3Düşük
CVE-2025-8961

LibTIFF tiffcrop tiffcrop.c main memory corruption

LibTIFF

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made availabl…

5.3Orta
CVE-2025-8177

LibTIFF thumbnail.c setrow buffer overflow

LibTIFF

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6…

5.3Orta
CVE-2025-8176

LibTIFF tiffmedian.c get_histogram use after free

LibTIFF

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …

7.5Yüksek
CVE-2023-52356

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

libtiff; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

2.5%EPSS
6.5Orta
CVE-2023-6277

Libtiff: out-of-memory in tiffopen via a craft file

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

1.8%EPSS
6.1Orta
CVE-2023-1916
libtiff

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information discl…

5.5Orta
CVE-2022-1354
libtiff

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a deni…