Browse CVEs

HIGH 7.3 CVE-2025-61144 libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. Libtiff 4.7.1+ Fix from $1,9502026-02-23 MEDIUM 5.5 CVE-2025-61143 libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. Libtiff 4.7.1+ Fix from $1,6002026-02-23 MEDIUM 5.0 CVE-2025-61145 libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c. Libtiff 4.7.1+ Fix from $1,6002026-02-23 MEDIUM 5.3 CVE-2025-8851 A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.… Libtiff after 4.5.1 Fix from $1,6002025-08-11 HIGH 7.8 CVE-2025-8176 A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file… Libtiff after 4.7.0 Fix from $1,9502025-07-26 HIGH 7.8 CVE-2025-8177 A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c… Libtiff after 4.7.0 Fix from $1,9502025-07-26 MEDIUM 6.5 CVE-2022-40090 An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. Libtiff 4.4.0+ Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2020-18768 There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a… Libtiff No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-2908 A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a crafted TIFF image file to the tif… Libtiff after 4.5.0 Fix from $1,6002023-06-30 MEDIUM 5.5 CVE-2023-25433 libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop … Libtiff Patch available Fix from $1,6002023-06-29 MEDIUM 5.5 CVE-2023-26966 libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be b… Libtiff Patch available Fix from $1,6002023-06-29 MEDIUM 5.5 CVE-2023-25435 libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. Libtiff Patch available Fix from $1,6002023-06-21 MEDIUM 6.5 CVE-2023-3316 A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /… Libtiff 4.5.1+ Fix from $1,6002023-06-19 MEDIUM 5.5 CVE-2023-26965 loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. Libtiff after 4.5.0 Fix from $1,6002023-06-14 HIGH 8.8 CVE-2023-25434 libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. Libtiff No fix yet Fix from $1,9502023-06-14 MEDIUM 5.5 CVE-2023-30774 A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS val… Libtiff 14.1+ Fix from $1,6002023-05-19 MEDIUM 5.5 CVE-2023-30775 A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. Libtiff Mitigation only Fix from $1,6002023-05-19 MEDIUM 5.5 CVE-2023-30086 Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c. Libtiff No fix yet Fix from $1,6002023-05-09 MEDIUM 6.1 CVE-2023-1916 A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ex… Libtiff after 4.5.0 Fix from $1,6002023-04-10 MEDIUM 5.5 CVE-2023-0798 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0799 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0800 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff fil… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0801 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing … Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0802 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff fil… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0803 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff fil… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0804 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff fil… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0795 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0796 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0797 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing a… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2022-34266 The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different v… Libtiff Mitigation only Fix from $1,6002022-07-19