LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7006 | 7.5 | Aug 12 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c` Affected: 3.5.1 through 4.6.0 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: before 4.6.0 |
| CVE-2023-52355 | 7.5 | Jan 25 | Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom Affected: before 4.6.0 |
| CVE-2017-16232 | 7.5 | Mar 17 | LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and… Affected: 4.0.8 |
| CVE-2017-12944 | 7.5 | Aug 18 | The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service… Affected: 4.0.8 |
| CVE-2017-10688 | 7.5 | Jun 29 | In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c Affected: 4.0.8 |
| CVE-2016-9448 | 7.5 | Jan 27 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII… Affected: 4.0.6 |
| CVE-2016-5323 | 7.5 | Jan 20 | The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image Affected: through 4.0.6 |
| CVE-2016-9297 | 7.5 | Jan 18 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or… Affected: 4.0.6 |
| CVE-2016-3658 | 7.5 | Oct 3 | The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service… Affected: through 4.0.6 |
| CVE-2016-3634 | 7.5 | Oct 3 | The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors… Affected: through 4.0.6 |
| CVE-2016-3633 | 7.5 | Oct 3 | The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the src… Affected: through 4.0.6 |
| CVE-2016-3631 | 7.5 | Oct 3 | The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors… Affected: through 4.0.6 |
| CVE-2016-3624 | 7.5 | Oct 3 | The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to… Affected: through 4.0.6 |
| CVE-2016-3623 | 7.5 | Oct 3 | The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0 Affected: through 4.0.6 |
| CVE-2016-3620 | 7.5 | Oct 3 | The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service… Affected: through 4.0.6 |
| CVE-2015-8870 | 7.4 | Dec 6 | Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive… Affected: through 4.0.3 |
| CVE-2025-61144 | 7.3 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function Affected: before 4.7.1 |
| CVE-2022-0891 | 7.1 | Mar 10 | A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted… Affected: 3.9.0 through 4.3.0 |
| CVE-2016-5652 | 7.0 | Jan 6 | An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool Affected: 4.0.6 |