LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10270 | 7.8 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to… Affected: 4.0.7 |
| CVE-2016-10269 | 7.8 | Mar 24 | LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of… Affected: 4.0.7 |
| CVE-2016-10268 | 7.8 | Mar 24 | tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact… Affected: 4.0.7 |
| CVE-2016-10094 | 7.8 | Mar 1 | Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image Affected: 4.0.7 |
| CVE-2016-10093 | 7.8 | Mar 1 | Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4,… Affected: 4.0.7 |
| CVE-2016-10092 | 7.8 | Mar 1 | Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6,… Affected: 4.0.7 |
| CVE-2016-9453 | 7.8 | Jan 27 | The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a… Affected: before 4.0.7 |
| CVE-2016-3991 | 7.8 | Sep 21 | Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write)… Affected: through 4.0.6 |
| CVE-2016-3990 | 7.8 | Sep 21 | Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or… Affected: through 4.0.6 |
| CVE-2016-3945 | 7.8 | Sep 21 | Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote… Affected: through 4.0.6 |
| CVE-2016-3632 | 7.8 | Sep 21 | The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via… Affected: through 4.0.6 |
| CVE-2024-7006 | 7.5 | Aug 12 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c` Affected: 3.5.1 through 4.6.0 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: All versions, or not specified |
| CVE-2023-52355 | 7.5 | Jan 25 | Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom Affected: before 4.6.0 |
| CVE-2017-16232 | 7.5 | Mar 17 | LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and… Affected: 4.0.8 |
| CVE-2017-12944 | 7.5 | Aug 18 | The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service… Affected: 4.0.8 |
| CVE-2017-10688 | 7.5 | Jun 29 | In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c Affected: 4.0.8 |
| CVE-2016-9448 | 7.5 | Jan 27 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII… Affected: 4.0.6 |
| CVE-2016-5323 | 7.5 | Jan 20 | The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image Affected: through 4.0.6 |
| CVE-2016-9297 | 7.5 | Jan 18 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or… Affected: 4.0.6 |
| CVE-2016-3658 | 7.5 | Oct 3 | The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service… Affected: through 4.0.6 |
| CVE-2016-3634 | 7.5 | Oct 3 | The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors… Affected: through 4.0.6 |
| CVE-2016-3633 | 7.5 | Oct 3 | The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src… Affected: through 4.0.6 |
| CVE-2016-3631 | 7.5 | Oct 3 | The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors… Affected: through 4.0.6 |
| CVE-2016-3624 | 7.5 | Oct 3 | The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to… Affected: through 4.0.6 |
| CVE-2016-3623 | 7.5 | Oct 3 | The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0 Affected: through 4.0.6 |
| CVE-2016-3620 | 7.5 | Oct 3 | The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service… Affected: through 4.0.6 |
| CVE-2015-8870 | 7.4 | Dec 6 | Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive… Affected: through 4.0.3 |
| CVE-2025-61144 | 7.3 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function Affected: before 4.7.1 |
| CVE-2022-0891 | 7.1 | Mar 10 | A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted… Affected: 3.9.0 through 4.3.0 |
| CVE-2016-5652 | 7.0 | Jan 6 | An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool Affected: 4.0.6 |
| CVE-2023-6277 | 6.5 | Nov 24 | An out-of-memory flaw was found in libtiff Affected: All versions, or not specified |
| CVE-2023-41175 | 6.5 | Oct 5 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c Affected: before 4.6.0 |
| CVE-2023-40745 | 6.5 | Oct 5 | LibTIFF is vulnerable to an integer overflow Affected: before 4.6.0 |
| CVE-2022-40090 | 6.5 | Aug 22 | An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file Affected: before 4.4.0 |
| CVE-2023-3618 | 6.5 | Jul 12 | A flaw was found in libtiff Affected: before 4.5.1 |
| CVE-2023-3316 | 6.5 | Jun 19 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying… Affected: 3.9.0 before 4.5.1 |
| CVE-2022-3597 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a… Affected: <=4.4.0 |
| CVE-2022-3627 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a… Affected: <=4.4.0 |
| CVE-2022-3626 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a… Affected: <=4.4.0 |
| CVE-2022-3599 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: <=4.4.0 |
| CVE-2022-3598 | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: <=4.4.0 |
| CVE-2022-2521 | 6.5 | Aug 31 | It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and… Affected: 4.4.0 |
| CVE-2022-2520 | 6.5 | Aug 31 | A flaw was found in libtiff 4.4.0rc1 Affected: 4.4.0 |
| CVE-2022-2519 | 6.5 | Aug 31 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 Affected: 4.4.0 |
| CVE-2022-34526 | 6.5 | Jul 29 | A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0 Affected: 4.4.0 |
| CVE-2022-2058 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.4.0 |
| CVE-2022-2057 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.4.0 |
| CVE-2022-2056 | 6.5 | Jun 30 | Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.4.0 |
| CVE-2022-1210 | 6.5 | Apr 3 | A vulnerability classified as problematic was found in LibTIFF 4.3.0 Affected: 4.3.0 |