Low severity · published Aug 14, 2025
CVE-2025-8961
LibTIFF tiffcrop tiffcrop.c main memory corruption
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
LibTIFF ·
4.7.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-8961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-8961
Product
http://www.libtiff.org/
Exploit
https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing
Exploit
https://gitlab.com/libtiff/libtiff/-/issues/721
Exploit
https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960
Permissions Required
https://vuldb.com/?ctiid.319955
Third Party Advisory
https://vuldb.com/?id.319955
More from LibTIFF
7.8
CVE-2025-8177
LibTIFF thumbnail.c setrow buffer overflow
7.8
CVE-2025-8176
LibTIFF tiffmedian.c get_histogram use after free
5.3
CVE-2025-8851
LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow
2.5
CVE-2025-9165
LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
2.5
CVE-2025-8534
libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference