LI
Product
libtiff
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25434 | 8.8 | Jun 14 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215 Affected: 4.5.0 |
| CVE-2022-3970 | 8.8 | Nov 13 | A vulnerability was found in LibTIFF Affected: before 4.5.0 |
| CVE-2019-17546 | 8.8 | Oct 14 | tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a… Affected: before 4.1.0 |
| CVE-2019-6128 | 8.8 | Jan 11 | The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb Affected: 4.0.10 |
| CVE-2018-18557 | 8.8 | Oct 22 | LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9… Affected: 4.0.9 |
| CVE-2018-17795 | 8.8 | Sep 30 | The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or… Affected: 4.0.9 |
| CVE-2018-17101 | 8.8 | Sep 16 | An issue was discovered in LibTIFF 4.0.9 Affected: 4.0.9 |
| CVE-2018-17100 | 8.8 | Sep 16 | An issue was discovered in LibTIFF 4.0.9 Affected: 4.0.9 |
| CVE-2018-16335 | 8.8 | Sep 2 | newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and… Affected: 4.0.9 |
| CVE-2018-15209 | 8.8 | Aug 8 | ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly… Affected: 4.0.9 |
| CVE-2018-12900 | 8.8 | Jun 26 | Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6,… Affected: 4.0.9 |
| CVE-2018-8905 | 8.8 | Mar 22 | In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps Affected: 4.0.9 |
| CVE-2016-5314 | 8.8 | Mar 12 | Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly… Affected: through 4.0.6 |
| CVE-2014-8129 | 8.8 | Mar 12 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by… Affected: 4.0.3 |
| CVE-2018-5360 | 8.8 | Jan 14 | LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27 Affected: before 4.0.6 |
| CVE-2017-17973 | 8.8 | Dec 29 | In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c Affected: 4.0.8 |
| CVE-2017-17942 | 8.8 | Dec 28 | In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c Affected: 4.0.9 |
| CVE-2017-17095 | 8.8 | Dec 2 | tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly… Affected: 4.0.9 |
| CVE-2017-11335 | 8.8 | Jul 17 | There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related… Affected: 4.0.8 |
| CVE-2017-9935 | 8.8 | Jun 26 | In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c Affected: through 4.0.8 |
| CVE-2017-5563 | 8.8 | Jan 23 | LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff Affected: 4.0.7 |
| CVE-2017-5225 | 8.8 | Jan 12 | LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value Affected: 4.0.7 |
| CVE-2016-3621 | 8.8 | Oct 3 | The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service… Affected: through 4.0.6 |
| CVE-2016-8331 | 8.1 | Oct 28 | An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6 Affected: 4.0.6 |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: before 4.7.2 |
| CVE-2025-8177 | 7.8 | Jul 26 | A vulnerability was found in LibTIFF up to 4.7.0 Affected: through 4.7.0 |
| CVE-2025-8176 | 7.8 | Jul 26 | A vulnerability was found in LibTIFF up to 4.7.0 Affected: through 4.7.0 |
| CVE-2020-35524 | 7.8 | Mar 9 | A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool Affected: before 4.2.0 |
| CVE-2020-35523 | 7.8 | Mar 9 | An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file Affected: before 4.2.0 |
| CVE-2017-7602 | 7.8 | Apr 9 | LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a… Affected: 4.0.7 |
| CVE-2017-7601 | 7.8 | Apr 9 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash)… Affected: 4.0.7 |
| CVE-2017-7600 | 7.8 | Apr 9 | LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service… Affected: 4.0.7 |
| CVE-2017-7599 | 7.8 | Apr 9 | LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service… Affected: 4.0.7 |
| CVE-2017-7598 | 7.8 | Apr 9 | tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image Affected: 4.0.7 |
| CVE-2017-7597 | 7.8 | Apr 9 | tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of… Affected: 4.0.7 |
| CVE-2017-7596 | 7.8 | Apr 9 | LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service… Affected: 4.0.7 |
| CVE-2017-7592 | 7.8 | Apr 9 | The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service… Affected: 4.0.7 |
| CVE-2016-10272 | 7.8 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to… Affected: 4.0.7 |
| CVE-2016-10271 | 7.8 | Mar 24 | tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact… Affected: 4.0.7 |
| CVE-2016-10270 | 7.8 | Mar 24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to… Affected: 4.0.7 |
| CVE-2016-10269 | 7.8 | Mar 24 | LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of… Affected: 4.0.7 |
| CVE-2016-10268 | 7.8 | Mar 24 | tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact… Affected: 4.0.7 |
| CVE-2016-10094 | 7.8 | Mar 1 | Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image Affected: 4.0.7 |
| CVE-2016-10093 | 7.8 | Mar 1 | Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4,… Affected: 4.0.7 |
| CVE-2016-10092 | 7.8 | Mar 1 | Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6,… Affected: 4.0.7 |
| CVE-2016-9453 | 7.8 | Jan 27 | The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a… Affected: before 4.0.7 |
| CVE-2016-3991 | 7.8 | Sep 21 | Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write)… Affected: through 4.0.6 |
| CVE-2016-3990 | 7.8 | Sep 21 | Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or… Affected: through 4.0.6 |
| CVE-2016-3945 | 7.8 | Sep 21 | Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote… Affected: through 4.0.6 |
| CVE-2016-3632 | 7.8 | Sep 21 | The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via… Affected: through 4.0.6 |