Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 266

Export CSV
CVE-2016-5317

libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Libtiff Opensuse Opensuse Project
Products
Libtiff Opensuse Leap
CVE-2016-5318

libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.

CVSS 3.0 · 6.5 Medium EPSS 4.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10269

libtiff: Heap-based buffer overflow in tiff_unix.c

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10268

libtiff: Integer underflow in tiffcp.c

tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-13726

libtiff: Reachable assertion abort in the function TIFFWriteDirectorySec()

There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-5323

libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption

The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.

CVSS 3.0 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Libtiff Opensuse
Products
Libtiff Opensuse
CVE-2016-10267

libtiff: Divide-by-zero in tif_ojpeg.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-6223

libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()

The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.

CVSS 3.0 · 9.1 Critical EPSS 3.3% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2014-8127

libtiff: out-of-bounds read with malformed TIFF image in multiple tools

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString function in tif_dir.c in the thumbnail tool, (2) compresscontig function in tiff2bw.c in the tiff2bw tool, (3) putcontig8bitCIELab function in tif_getimage.c in the tiff2rgba tool, LZWPreDecode function in tif_lzw.c in the (4) tiff2ps or (5) tiffdither tool, (6) NeXTDecode function in tif_next.c in the tiffmedian tool, or (7) TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool.

CVSS 3.0 · 6.5 Medium EPSS 5.7% KEV · Not listed
Vendors
Libtiff Opensuse Redhat
Products
Libtiff Opensuse Enterprise Linux
CVE-2016-9273

libtiff: Out-of-bounds heap read in cpStrips

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.

CVSS 3.0 · 5.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10266

libtiff: Divide-by-zero in tif_read.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10095

libtiff: Stack-based buffer overflow in _TIFFVGetField

Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

CVSS 3.0 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10094

libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-9532

libtiff: Multiple uint32 overflows leading to heap buffer over-read

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Libtiff
Products
Debian Linux Libtiff
CVE-2017-11613

libtiff: Memory leak via corrupt td_imagelength in TIFFOpen function

In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If we set the value of td_imagelength close to the amount of system memory, it will hang the system or trigger the OOM killer.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-13727

libtiff: Reachable assertion abort in the function TIFFWriteDirectoryTagSubifd()

There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10093

libtiff: Integer overflow in DECLAREreadFunc

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image, which triggers a heap-based buffer overflow.

CVSS 3.0 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10092

libtiff: Heap-based buffer overflow in _TIFFFax3fillruns

Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-10688

libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function

In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 7.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff