Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 266

Export CSV
CVE-2025-8534

libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2015-7313

libtiff: OOM when parsing crafted tiff files

LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2022-3599

libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Active Iq Unified Manager and 1 more
CVE-2022-3598

libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Active Iq Unified Manager and 1 more
CVE-2022-3597

libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Active Iq Unified Manager and 1 more
CVE-2022-3626

libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Active Iq Unified Manager and 1 more
CVE-2022-3627

libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Libtiff Netapp and 1 more
Products
Debian Linux Libtiff Active Iq Unified Manager and 1 more
CVE-2017-7598

libtiff: Divide-by-zero in tif_dirread.c

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-5323

libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption

The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.

CVSS 3.0 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Libtiff Opensuse
Products
Libtiff Opensuse
CVE-2017-7599

libtiff: Unsigned short out of range in tif_dirwrite.c

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-5652

libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.

CVSS 3.0 · 7.0 High EPSS 4.1% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2017-7600

libtiff: Unsigned char out of range in tif_dirwrite.c

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-5322

libtiff: Out-of-bounds read in extractContigSamplesBytes() function

The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Libtiff
Products
Debian Linux Libtiff
CVE-2016-6223

libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()

The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.

CVSS 3.0 · 9.1 Critical EPSS 3.3% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10371

libtiff: Assertion failure in TIFFWriteDirectoryTagCheckedRational

The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted TIFF file.

CVSS 3.0 · 5.5 Medium EPSS 1.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-7597

libtiff: Float out of range issue in tif_dirread.c

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-7601

libtiff: Signed integer overflow in tif_jpeg.c

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2014-8127

libtiff: out-of-bounds read with malformed TIFF image in multiple tools

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.

CVSS 3.0 · 6.5 Medium EPSS 5.7% KEV · Not listed
Vendors
Libtiff Opensuse Redhat
Products
Libtiff Opensuse Enterprise Linux
CVE-2016-5318

libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.

CVSS 3.0 · 6.5 Medium EPSS 4.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-5317

libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Libtiff Opensuse Opensuse Project
Products
Libtiff Opensuse Leap