libtiff Vulnerability Advisory Catalog

Total 252 security vulnerabilities recorded for libtiff software and firmware.

← Back to All Vendors
Component: libtiff

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be bi...

📅 2023-06-29
CVSS 5.5 Dossier →
Component: libtiff

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop c...

📅 2023-06-29
CVSS 5.5 Dossier →
Component: libtiff

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753....

📅 2023-06-21
CVSS 5.5 Dossier →
CVE-2023-3316 MEDIUM
Component: libtiff

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /d...

📅 2023-06-19
CVSS 5.9 Dossier →
Component: libtiff

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image....

📅 2023-06-14
CVSS 5.5 Dossier →
Component: libtiff

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215....

📅 2023-06-14
CVSS 8.8 Dossier →
Component: libtiff

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c....

📅 2023-05-19
CVSS 5.5 Dossier →
Component: libtiff

A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS valu...

📅 2023-05-19
CVSS 5.5 Dossier →
CVE-2023-2731 MEDIUM
Component: libtiff

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft ...

📅 2023-05-17
CVSS 5.5 Dossier →
Component: libtiff

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c....

📅 2023-05-09
CVSS 5.5 Dossier →
CVE-2023-1916 MEDIUM
Component: libtiff

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ext...

📅 2023-04-10
CVSS 6.1 Dossier →
CVE-2023-0804 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0803 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0802 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0801 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing a...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0800 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0799 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file....

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0798 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file....

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0797 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing at...

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0796 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file....

📅 2023-02-13
CVSS 6.8 Dossier →
CVE-2023-0795 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file....

📅 2023-02-13
CVSS 6.8 Dossier →
Component: libtiff

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF ...

📅 2023-01-23
CVSS 5.5 Dossier →
CVE-2022-3970 MEDIUM
Component: libtiff

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getima...

📅 2022-11-13
CVSS 6.3 Dossier →
CVE-2022-3627 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowin...

📅 2022-10-21
CVSS 5.5 Dossier →
Page 2 of 11 (252 Total Records)