Vulnerability index

Browse CVEs

148 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libtiff HIGH 7.3
CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

Fix: 4.7.1+
Fix from $1,950 2026-02-23
Libtiff MEDIUM 5.5
CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

Fix: 4.7.1+
Fix from $1,600 2026-02-23
Libtiff MEDIUM 5.0
CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

Fix: 4.7.1+
Fix from $1,600 2026-02-23
Libtiff MEDIUM 5.3
CVE-2025-8851

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.…

Fix: after 4.5.1
Fix from $1,600 2025-08-11
Libtiff HIGH 7.8
CVE-2025-8176

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file…

Fix: after 4.7.0
Fix from $1,950 2025-07-26
Libtiff HIGH 7.8
CVE-2025-8177

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c…

Fix: after 4.7.0
Fix from $1,950 2025-07-26
Libtiff MEDIUM 6.5
CVE-2022-40090

An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.

Fix: 4.4.0+
Fix from $1,600 2023-08-22
Libtiff MEDIUM 5.5
CVE-2020-18768

There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a…

No fix yet
Fix from $1,600 2023-08-22
Libtiff MEDIUM 5.5
CVE-2023-2908

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tif…

Fix: after 4.5.0
Fix from $1,600 2023-06-30
Libtiff MEDIUM 5.5
CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop …

Patch available
Fix from $1,600 2023-06-29
Libtiff MEDIUM 5.5
CVE-2023-26966

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be b…

Patch available
Fix from $1,600 2023-06-29
Libtiff MEDIUM 5.5
CVE-2023-25435

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.

Patch available
Fix from $1,600 2023-06-21
Libtiff MEDIUM 6.5
CVE-2023-3316

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /…

Fix: 4.5.1+
Fix from $1,600 2023-06-19
Libtiff MEDIUM 5.5
CVE-2023-26965

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

Fix: after 4.5.0
Fix from $1,600 2023-06-14
Libtiff HIGH 8.8
CVE-2023-25434

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

No fix yet
Fix from $1,950 2023-06-14
Libtiff MEDIUM 5.5
CVE-2023-30774

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS val…

Fix: 14.1+
Fix from $1,600 2023-05-19
Libtiff MEDIUM 5.5
CVE-2023-30775

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

Mitigation only
Fix from $1,600 2023-05-19
Libtiff MEDIUM 5.5
CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.

No fix yet
Fix from $1,600 2023-05-09
Libtiff MEDIUM 6.1
CVE-2023-1916

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ex…

Fix: after 4.5.0
Fix from $1,600 2023-04-10
Libtiff MEDIUM 5.5
CVE-2023-0798

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0799

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0800

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff fil…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0801

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing …

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff fil…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0803

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff fil…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff fil…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0795

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0796

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2023-0797

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing a…

Fix: after 4.4.0
Fix from $1,600 2023-02-13
Libtiff MEDIUM 5.5
CVE-2022-34266

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different v…

Mitigation only
Fix from $1,600 2022-07-19