LI
Product
libtiff
by libtiff · last CVE Mar 24, 2026
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch

Add libtiff to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3622
6.5
4%
Oct 3
The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted…
Affected: 4.0.6
CVE-2016-3619
6.5
2%
Oct 3
The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of…
Affected: 4.0.6
CVE-2015-8784
6.5
5%
Apr 13
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by…
Affected: before 4.0.7
CVE-2015-1547
6.5
3%
Apr 13
The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by…
Affected: through 4.0.6
CVE-2015-8783
6.5
3%
Feb 1
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image
Affected: before 4.0.7
CVE-2015-8782
6.5
3%
Feb 1
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781
Affected: before 4.0.7
CVE-2015-8781
6.5
3%
Feb 1
tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different…
Affected: before 4.0.7
CVE-2016-3186
6.2
3%
Apr 19
Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file
Affected: 4.0.6
CVE-2023-1916
6.1
0%
Apr 10
A flaw was found in tiffcrop, a program distributed by the libtiff package
Affected: 4.0 through 4.5.0
CVE-2022-1355
6.1
1%
Aug 31
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function
Affected: before 4.4.0
CVE-2025-61143
5.5
0%
Feb 23
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c
Affected: before 4.7.1
CVE-2023-3164
5.5
0%
Nov 2
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801
Affected: before 4.6.0
CVE-2023-3576
5.5
0%
Oct 4
A memory leak flaw was found in Libtiff's tiffcrop utility
Affected: before 4.5.1
CVE-2020-18768
5.5
0%
Aug 22
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file
Affected: 4.0.10
CVE-2023-2908
5.5
0%
Jun 30
A null pointer dereference issue was found in Libtiff's tif_dir.c file
Affected: through 4.5.0
CVE-2023-26966
5.5
0%
Jun 29
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian
Affected: 4.5.0
CVE-2023-25433
5.5
0%
Jun 29
libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499
Affected: 4.5.0
CVE-2023-25435
5.5
0%
Jun 21
libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753
Affected: 4.5.0
CVE-2023-26965
5.5
0%
Jun 14
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image
Affected: through 4.5.0
CVE-2023-30775
5.5
0%
May 19
A vulnerability was found in the libtiff library
Affected: 4.4.0
CVE-2023-30774
5.5
1%
May 19
A vulnerability was found in the libtiff library
Affected: 3.5.1 through 4.4.0
CVE-2023-2731
5.5
0%
May 17
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file
Affected: before 4.5.0
CVE-2023-30086
5.5
0%
May 9
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c
Affected: 4.0.7
CVE-2022-4645
5.5
0%
Mar 3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 3.5.1 through 4.4.0
CVE-2023-0804
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0803
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0802
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0801
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a…
Affected: through 4.4.0
CVE-2023-0800
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0799
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0798
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0797
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a…
Affected: through 4.4.0
CVE-2023-0796
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0795
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2022-48281
5.5
0%
Jan 23
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image
Affected: through 4.5.0
CVE-2022-3570
5.5
1%
Oct 21
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file…
Affected: >=3.9.0, <=4.4.0
CVE-2022-1354
5.5
1%
Aug 31
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function
Affected: before 4.4.0
CVE-2022-2953
5.5
1%
Aug 29
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2022-2869
5.5
0%
Aug 17
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine
Affected: before 4.4.0
CVE-2022-2868
5.5
0%
Aug 17
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to…
Affected: before 4.4.0
CVE-2022-2867
5.5
0%
Aug 17
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write
Affected: before 4.4.0
CVE-2022-34266
5.5
0%
Jul 19
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than…
Affected: 4.0.3-35
CVE-2022-1623
5.5
1%
May 11
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-1622
5.5
2%
May 11
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-1056
5.5
1%
Mar 28
Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0924
5.5
1%
Mar 11
Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0909
5.5
1%
Mar 11
Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0908
5.5
1%
Mar 11
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via…
Affected: through 4.3.0
CVE-2022-0907
5.5
1%
Mar 11
Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0562
5.5
1%
Feb 11
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service…
Affected: 4.0.0 through 4.3.0
Page 2 of 3 · 122 total