Browse CVEs

HIGH 8.1 CVE-2016-8331EPSS 7% An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead t… Libtiff No fix yet Fix from $1,9502016-10-28 MEDIUM 6.5 CVE-2016-3622 The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-b… Libtiff No fix yet Fix from $1,6002016-10-03 MEDIUM 6.5 CVE-2016-3619 The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote att… Libtiff No fix yet Fix from $1,6002016-10-03 MEDIUM 5.5 CVE-2015-8665 tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. Libtiff Mitigation only Fix from $1,6002016-04-13 CRITICAL 9.8 CVE-2015-7554 The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly … Libtiff No fix yet Fix from $2,3002016-01-08 MEDIUM 5.0 CVE-2014-9330 Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) via crafted BMP image, re… Libtiff Mitigation only Fix from $1,6002015-01-20 MEDIUM 6.8 CVE-2012-1173EPSS 7% Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF fil… Libtiff Mitigation only Fix from $1,6002012-06-04 MEDIUM 6.8 CVE-2010-3087 LibTIFF before 3.9.2-5.2.1 in SUSE openSUSE 11.3 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitra… Libtiff Mitigation only Fix from $1,6002010-09-28 MEDIUM 5.0 CVE-2006-0405 The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a craf… Libtiff Mitigation only Fix from $1,6002006-01-25 MEDIUM 5.0 CVE-2005-2452 libtiff up to 3.7.0 allows remote attackers to cause a denial of service (application crash) via a TIFF image header with a zero "YCbCr subsampling" … Libtiff Mitigation only Fix from $1,6002005-08-03