libtiff Vulnerability Advisory Catalog

Total 252 security vulnerabilities recorded for libtiff software and firmware.

← Back to All Vendors
CVE-2022-3626 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allow...

📅 2022-10-21
CVSS 5.5 Dossier →
CVE-2022-3599 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted ...

📅 2022-10-21
CVSS 5.5 Dossier →
CVE-2022-3598 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-servic...

📅 2022-10-21
CVSS 5.5 Dossier →
CVE-2022-3597 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowin...

📅 2022-10-21
CVSS 5.5 Dossier →
Component: libtiff

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access...

📅 2022-10-21
CVSS 7.7 Dossier →
CVE-2022-2521 MEDIUM
Component: libtiff

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can ...

📅 2022-08-31
CVSS 6.5 Dossier →
CVE-2022-2520 MEDIUM
Component: libtiff

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when readin...

📅 2022-08-31
CVSS 6.5 Dossier →
CVE-2022-2519 MEDIUM
Component: libtiff

There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

📅 2022-08-31
CVSS 6.5 Dossier →
CVE-2022-1355 MEDIUM
Component: libtiff

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffc...

📅 2022-08-31
CVSS 6.1 Dossier →
CVE-2022-1354 MEDIUM
Component: libtiff

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIF...

📅 2022-08-31
CVSS 5.5 Dossier →
CVE-2022-2953 MEDIUM
Component: libtiff

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted...

📅 2022-08-29
CVSS 5.5 Dossier →
CVE-2022-2869 MEDIUM
Component: libtiff

libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who...

📅 2022-08-17
CVSS 5.5 Dossier →
CVE-2022-2868 MEDIUM
Component: libtiff

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is abl...

📅 2022-08-17
CVSS 5.5 Dossier →
CVE-2022-2867 MEDIUM
Component: libtiff

libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop...

📅 2022-08-17
CVSS 5.5 Dossier →
Component: libtiff

A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service (...

📅 2022-07-29
CVSS 6.5 Dossier →
Component: libtiff

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vu...

📅 2022-07-19
CVSS 5.5 Dossier →
CVE-2022-2058 MEDIUM
Component: libtiff

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtif...

📅 2022-06-30
CVSS 5.5 Dossier →
CVE-2022-2057 MEDIUM
Component: libtiff

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtif...

📅 2022-06-30
CVSS 5.5 Dossier →
CVE-2022-2056 MEDIUM
Component: libtiff

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtif...

📅 2022-06-30
CVSS 5.5 Dossier →
CVE-2022-1623 MEDIUM
Component: libtiff

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted t...

📅 2022-05-11
CVSS 5.5 Dossier →
CVE-2022-1622 MEDIUM
Component: libtiff

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted t...

📅 2022-05-11
CVSS 5.5 Dossier →
CVE-2022-1210 MEDIUM
Component: libtiff

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a ma...

📅 2022-04-03
CVSS 4.3 Dossier →
CVE-2022-1056 MEDIUM
Component: libtiff

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile li...

📅 2022-03-28
CVSS 5.5 Dossier →
CVE-2022-0924 MEDIUM
Component: libtiff

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libt...

📅 2022-03-11
CVSS 5.5 Dossier →
Page 3 of 11 (252 Total Records)