LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3622 | 6.5 | Oct 3 | The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted… Affected: 4.0.6 |
| CVE-2016-3619 | 6.5 | Oct 3 | The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of… Affected: 4.0.6 |
| CVE-2015-8784 | 6.5 | Apr 13 | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by… Affected: before 4.0.7 |
| CVE-2015-1547 | 6.5 | Apr 13 | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by… Affected: through 4.0.6 |
| CVE-2015-8783 | 6.5 | Feb 1 | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image Affected: before 4.0.7 |
| CVE-2015-8782 | 6.5 | Feb 1 | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a different vulnerability than CVE-2015-8781 Affected: before 4.0.7 |
| CVE-2015-8781 | 6.5 | Feb 1 | tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different… Affected: before 4.0.7 |
| CVE-2016-3186 | 6.2 | Apr 19 | Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file Affected: 4.0.6 |
| CVE-2023-1916 | 6.1 | Apr 10 | A flaw was found in tiffcrop, a program distributed by the libtiff package Affected: 4.0 through 4.5.0 |
| CVE-2022-1355 | 6.1 | Aug 31 | A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function Affected: before 4.4.0 |
| CVE-2025-61143 | 5.5 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c Affected: before 4.7.1 |
| CVE-2023-3164 | 5.5 | Nov 2 | A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801 Affected: before 4.6.0 |
| CVE-2023-3576 | 5.5 | Oct 4 | A memory leak flaw was found in Libtiff's tiffcrop utility Affected: before 4.5.1 |
| CVE-2020-18768 | 5.5 | Aug 22 | There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file Affected: 4.0.10 |
| CVE-2023-2908 | 5.5 | Jun 30 | A null pointer dereference issue was found in Libtiff's tif_dir.c file Affected: through 4.5.0 |
| CVE-2023-26966 | 5.5 | Jun 29 | libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian Affected: 4.5.0 |
| CVE-2023-25433 | 5.5 | Jun 29 | libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499 Affected: 4.5.0 |
| CVE-2023-25435 | 5.5 | Jun 21 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753 Affected: 4.5.0 |
| CVE-2023-26965 | 5.5 | Jun 14 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image Affected: through 4.5.0 |
| CVE-2023-30775 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 4.4.0 |
| CVE-2023-30774 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 3.5.1 through 4.4.0 |
| CVE-2023-2731 | 5.5 | May 17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file Affected: before 4.5.0 |
| CVE-2023-30086 | 5.5 | May 9 | Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c Affected: 4.0.7 |
| CVE-2022-4645 | 5.5 | Mar 3 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 3.5.1 through 4.4.0 |
| CVE-2023-0804 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0803 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0802 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0801 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a… Affected: through 4.4.0 |
| CVE-2023-0800 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0799 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0798 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0797 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a… Affected: through 4.4.0 |
| CVE-2023-0796 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2023-0795 | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2022-48281 | 5.5 | Jan 23 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image Affected: through 4.5.0 |
| CVE-2022-3570 | 5.5 | Oct 21 | Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file… Affected: >=3.9.0, <=4.4.0 |
| CVE-2022-1354 | 5.5 | Aug 31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function Affected: before 4.4.0 |
| CVE-2022-2953 | 5.5 | Aug 29 | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: through 4.4.0 |
| CVE-2022-2869 | 5.5 | Aug 17 | libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine Affected: before 4.4.0 |
| CVE-2022-2868 | 5.5 | Aug 17 | libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to… Affected: before 4.4.0 |
| CVE-2022-2867 | 5.5 | Aug 17 | libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write Affected: before 4.4.0 |
| CVE-2022-34266 | 5.5 | Jul 19 | The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than… Affected: 4.0.3-35 |
| CVE-2022-1623 | 5.5 | May 11 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-1622 | 5.5 | May 11 | LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-1056 | 5.5 | Mar 28 | Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0924 | 5.5 | Mar 11 | Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0909 | 5.5 | Mar 11 | Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0908 | 5.5 | Mar 11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via… Affected: through 4.3.0 |
| CVE-2022-0907 | 5.5 | Mar 11 | Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file Affected: 4.3.0 |
| CVE-2022-0562 | 5.5 | Feb 11 | Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service… Affected: 4.0.0 through 4.3.0 |
