Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 266

Export CSV
CVE-2016-10269

libtiff: Heap-based buffer overflow in tiff_unix.c

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.

CVSS 3.0 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10270

libtiff: Heap-based buffer overflow in tiff_read.c

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.

CVSS 3.0 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2016-10271

libtiff: Heap-based buffer overflow in tif_fax3.c

tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.

CVSS 3.0 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-10688

libtiff: Assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function

In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote denial of service attack.

CVSS 3.0 · 7.5 High EPSS 7.4% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2017-11335

libtiff: Heap-based buffer overflow in tiff2pdf

There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-bounds write (related to the ZIPDecode function in tif_zip.c). A crafted input may lead to a remote denial of service attack or an arbitrary code execution attack.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2022-1210

LibTIFF tiff2ps resource consumption

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.

CVSS 3.1 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Libtiff Netapp
Products
Libtiff Ontap Select Deploy Administration Utility
CVE-2022-3970

LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

CVSS 3.1 · 6.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Debian Libtiff and 2 more
Products
Ipados Iphone Os Macos and 5 more
CVE-2016-3658

libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function

The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving the ma variable.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Libtiff
Products
Libtiff
CVE-2015-1547

libtiff: use of uninitialized memory in NeXTDecode

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.

CVSS 3.0 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2015-7554

libtiff: Invalid-write in _TIFFVGetField() when parsing some extension tags

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

CVSS 3.0 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2015-8665

libtiff: Out-of-bounds read in tif_getimage.c

tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2015-8668

libtiff: OOB read in bmp2tiff

Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.

CVSS 3.1 · 9.8 Critical EPSS 13.7% KEV · Not listed
Vendors
Libtiff Oracle Redhat
Products
Libtiff Linux Vm Server and 3 more
CVE-2015-8683

libtiff: Out-of-bounds when reading CIE Lab image format files

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2015-8781

libtiff: invalid assertion

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of samples per pixel in a LogL compressed TIFF image, a different vulnerability than CVE-2015-8782.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2015-8784

libtiff: out-of-bound write in NeXTDecode()

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.

CVSS 3.1 · 6.5 Medium EPSS 4.6% KEV · Not listed
Vendors
Debian Libtiff Redhat
Products
Debian Linux Libtiff Enterprise Linux
CVE-2015-8870

libtiff: Integer overflow in tools/bmp2tiff.c

Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly obtain sensitive information from process memory, via crafted width and length values in RLE4 or RLE8 data in a BMP file.

CVSS 3.0 · 7.4 High EPSS 2.1% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2016-3186

libtiff: buffer overflow in gif2tiff

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.

CVSS 3.0 · 6.2 Medium EPSS 2.6% KEV · Not listed
Vendors
Libtiff Opensuse Redhat
Products
Libtiff Opensuse Enterprise Linux
CVE-2016-3622

libtiff: Division by zero in fpAcc function

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

CVSS 3.0 · 6.5 Medium EPSS 3.9% KEV · Not listed
Vendors
Libtiff
Products
Libtiff