LI
Vendor
libtiff
262
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-4775 | LI Libtiff Libtiff | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing |
| CVE-2025-61145 | LI Libtiff Libtiff | 5.0 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c |
| CVE-2025-61144 | LI Libtiff Libtiff | 7.3 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function |
| CVE-2025-61143 | LI Libtiff Libtiff | 5.5 | Feb 23 | libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c |
| CVE-2025-9165 | LI Libtiff Libtiff | 2.5 | Aug 19 | LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak |
| CVE-2025-8961 | LI Libtiff Libtiff | 3.3 | Aug 14 | LibTIFF tiffcrop tiffcrop.c main memory corruption |
| CVE-2025-8851 | LI Libtiff Libtiff | 5.3 | Aug 11 | LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow |
| CVE-2025-8534 | LI Libtiff Libtiff | 2.5 | Aug 4 | libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference |
| CVE-2024-13978 | LI Libtiff Libtiff | 2.5 | Aug 1 | LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference |
| CVE-2025-8177 | LI Libtiff Libtiff | 7.8 | Jul 26 | LibTIFF thumbnail.c setrow buffer overflow |
| CVE-2025-8176 | LI Libtiff Libtiff | 7.8 | Jul 26 | LibTIFF tiffmedian.c get_histogram use after free |
| CVE-2024-7006 | LI Libtiff Libtiff | 7.5 | Aug 12 | A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c` |
| CVE-2023-52356 | LI Libtiff Libtiff | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API |
| CVE-2023-52355 | LI Libtiff Libtiff | 7.5 | Jan 25 | Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom |
| CVE-2023-6228 | LI Libtiff Libtiff | 3.3 | Dec 18 | An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application… |
| CVE-2023-6277 | LI Libtiff Libtiff | 6.5 | Nov 24 | An out-of-memory flaw was found in libtiff |
| CVE-2023-3164 | LI Libtiff Libtiff | 5.5 | Nov 2 | A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801 |
| CVE-2023-41175 | LI Libtiff Libtiff | 6.5 | Oct 5 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c |
| CVE-2023-40745 | LI Libtiff Libtiff | 6.5 | Oct 5 | LibTIFF is vulnerable to an integer overflow |
| CVE-2023-3576 | LI Libtiff Libtiff | 5.5 | Oct 4 | A memory leak flaw was found in Libtiff's tiffcrop utility |
| CVE-2022-40090 | LI Libtiff Libtiff | 6.5 | Aug 22 | An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file |
| CVE-2020-18768 | LI Libtiff Libtiff | 5.5 | Aug 22 | There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file |
| CVE-2023-3618 | LI Libtiff Libtiff | 6.5 | Jul 12 | A flaw was found in libtiff |
| CVE-2023-2908 | LI Libtiff Libtiff | 5.5 | Jun 30 | A null pointer dereference issue was found in Libtiff's tif_dir.c file |
| CVE-2023-26966 | LI Libtiff Libtiff | 5.5 | Jun 29 | libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian |
| CVE-2023-25433 | LI Libtiff Libtiff | 5.5 | Jun 29 | libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499 |
| CVE-2023-25435 | LI Libtiff Libtiff | 5.5 | Jun 21 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753 |
| CVE-2023-3316 | LI Libtiff Libtiff | 6.5 | Jun 19 | A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying… |
| CVE-2023-26965 | LI Libtiff Libtiff | 5.5 | Jun 14 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image |
| CVE-2023-25434 | LI Libtiff Libtiff | 8.8 | Jun 14 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215 |
| CVE-2023-30775 | LI Libtiff Libtiff | 5.5 | May 19 | A vulnerability was found in the libtiff library |
| CVE-2023-30774 | LI Libtiff Libtiff | 5.5 | May 19 | A vulnerability was found in the libtiff library |
| CVE-2023-2731 | LI Libtiff Libtiff | 5.5 | May 17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file |
| CVE-2023-30086 | LI Libtiff Libtiff | 5.5 | May 9 | Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c |
| CVE-2023-1916 | LI Libtiff Libtiff | 6.1 | Apr 10 | A flaw was found in tiffcrop, a program distributed by the libtiff package |
| CVE-2022-4645 | LI Libtiff Libtiff | 5.5 | Mar 3 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0804 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0803 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0802 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0801 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a… |
| CVE-2023-0800 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0799 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0798 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0797 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a… |
| CVE-2023-0796 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2023-0795 | LI Libtiff Libtiff | 5.5 | Feb 13 | LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2022-48281 | LI Libtiff Libtiff | 5.5 | Jan 23 | processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image |
| CVE-2022-3970 | LI Libtiff Libtiff | 8.8 | Nov 13 | A vulnerability was found in LibTIFF |
| CVE-2022-3570 | LI libtiff libtiff | 5.5 | Oct 21 | Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file… |
| CVE-2022-3599 | LI libtiff libtiff | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2022-3597 | LI libtiff libtiff | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a… |
| CVE-2022-3626 | LI libtiff libtiff | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a… |
| CVE-2022-3598 | LI libtiff libtiff | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file |
| CVE-2022-3627 | LI libtiff libtiff | 6.5 | Oct 21 | LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a… |
| CVE-2022-2521 | LI Libtiff Libtiff | 6.5 | Aug 31 | It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and… |
| CVE-2022-2520 | LI Libtiff Libtiff | 6.5 | Aug 31 | A flaw was found in libtiff 4.4.0rc1 |
| CVE-2022-2519 | LI Libtiff Libtiff | 6.5 | Aug 31 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 |
| CVE-2022-1355 | LI Libtiff Libtiff | 6.1 | Aug 31 | A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function |
| CVE-2022-1354 | LI Libtiff Libtiff | 5.5 | Aug 31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function |
| CVE-2022-2953 | LI Libtiff Libtiff | 5.5 | Aug 29 | LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file |
