Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 266

Export CSV
CVE-2017-9815

libtiff: Memory leak in the TIFFReadDirEntryLong8Array function

In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of service (memory leak within the function _TIFFmalloc in tif_unix.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Libtiff
Products
Ubuntu Linux Libtiff
CVE-2017-9403

libtiff: Memory leak in TIFFReadDirEntryLong8Array

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Libtiff
Products
Ubuntu Linux Debian Linux Libtiff
CVE-2017-9935

libtiff: Heap-based buffer overflow in t2p_write_pdf function

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Libtiff
Products
Ubuntu Linux Debian Linux Libtiff
CVE-2017-7602

libtiff: Signed integer overflow in tif_read.c

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9453

libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()

The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.

CVSS 3.1 · 7.8 High EPSS 2.6% KEV · Not listed
Vendors
Debian Libtiff Opensuse
Products
Debian Linux Libtiff Opensuse
CVE-2017-7600

libtiff: Unsigned char out of range in tif_dirwrite.c

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-9117

libtiff: Heap-based buffer over-read in bmp2tiff

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).

CVSS 3.1 · 4 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Libtiff
Products
Ubuntu Linux Libtiff
CVE-2017-7596

libtiff: Float out of range issue in tif_dir.c

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-7601

libtiff: Signed integer overflow in tif_jpeg.c

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9273

libtiff: Out-of-bounds heap read in cpStrips

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.

CVSS 3.0 · 5.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-9147

libtiff: Out of bounds read in _TIFFVGetField

LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 7.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9532

libtiff: Multiple uint32 overflows leading to heap buffer over-read

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Libtiff
Products
Debian Linux Libtiff
CVE-2017-9404

libtiff: Memory leak in OJPEGReadHeaderInfoSecTablesQTable

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Libtiff
Products
Ubuntu Linux Debian Linux Libtiff
CVE-2017-7597

libtiff: Float out of range issue in tif_dirread.c

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9297

libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII tag values.

CVSS 3.0 · 7.5 High EPSS 6.7% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-7595

libtiff: Divide-by-zero in JPEGSetupEncode (tiff_jpeg.c)

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-7598

libtiff: Divide-by-zero in tif_dirread.c

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.5% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10272

libtiff: Heap-based buffer overflow in tif_next.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9448

libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.

CVSS 3.0 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Libtiff Opensuse
Products
Libtiff Opensuse