LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0561 | 5.5 | Feb 11 | Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of… Affected: 3.9.0 through 4.3.0 |
| CVE-2022-22844 | 5.5 | Jan 10 | LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field Affected: 4.3.0 |
| CVE-2020-35522 | 5.5 | Mar 9 | In LibTIFF, there is a memory malloc failure in tif_pixarlog.c Affected: before 4.2.0 |
| CVE-2020-35521 | 5.5 | Mar 9 | A flaw was found in libtiff Affected: before 4.2.0 |
| CVE-2016-10371 | 5.5 | May 10 | The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit)… Affected: 4.0.6 |
| CVE-2016-5322 | 5.5 | Apr 11 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image Affected: through 4.0.6 |
| CVE-2017-7595 | 5.5 | Apr 9 | The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image Affected: 4.0.7 |
| CVE-2017-7594 | 5.5 | Apr 9 | The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image Affected: 4.0.7 |
| CVE-2017-7593 | 5.5 | Apr 9 | tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a… Affected: 4.0.7 |
| CVE-2016-10267 | 5.5 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8 Affected: 4.0.7 |
| CVE-2016-10266 | 5.5 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22 Affected: 4.0.7 |
| CVE-2015-7313 | 5.5 | Mar 17 | LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file Affected: before 4.0.7 |
| CVE-2016-5315 | 5.5 | Mar 7 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image Affected: through 4.0.6 |
| CVE-2016-10095 | 5.5 | Mar 1 | Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,… Affected: 4.0.7 |
| CVE-2016-9532 | 5.5 | Feb 6 | Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a… Affected: through 4.0.6 |
| CVE-2016-5102 | 5.5 | Feb 6 | Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a… Affected: through 4.0.6 |
| CVE-2016-9273 | 5.5 | Jan 18 | tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode Affected: 4.0.6 |
| CVE-2015-8683 | 5.5 | Apr 13 | The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image Affected: 4.0.6 |
| CVE-2015-8665 | 5.5 | Apr 13 | tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image Affected: 4.0.6 |
| CVE-2025-8851 | 5.3 | Aug 11 | LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow Affected: through 4.5.1 |
| CVE-2025-61145 | 5.0 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c Affected: before 4.7.1 |
| CVE-2017-9117 | 4.0 | May 21 | In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input,… Affected: 4.0.7 |