Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 266

Export CSV
CVE-2017-18013

libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes crash

In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-16232

libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue

CVSS 3.0 · 7.5 High EPSS 5.4% KEV · Not listed
Vendors
Libtiff Opensuse Suse
Products
Libtiff Leap Linux Enterprise Desktop and 2 more
CVE-2016-5314

libtiff: Out-of-bounds write in PixarLogDecode() function

Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.

CVSS 3.0 · 8.8 High EPSS 4.4% KEV · Not listed
Vendors
Debian Libtiff Opensuse and 1 more
Products
Debian Linux Libtiff Leap and 2 more
CVE-2014-8130

libtiff: divide by zero in the tiffdither tool

The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.

CVSS 3.0 · 6.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Apple Libtiff Redhat
Products
Iphone Os Mac Os X Libtiff and 7 more
CVE-2014-8129

libtiff: out-of-bounds read/write with malformed TIFF image in tiff2pdf

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.

CVSS 3.0 · 8.8 High EPSS 3.7% KEV · Not listed
Vendors
Apple Debian Libtiff and 1 more
Products
Iphone Os Mac Os X Debian Linux and 6 more
CVE-2014-8128

libtiff: out-of-bounds write in multiple tools

LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.

CVSS 3.1 · 6.5 Medium EPSS 3.9% KEV · Not listed
Vendors
Apple Libtiff
Products
Iphone Os Mac Os X Libtiff