libtiff Vulnerability Advisory Catalog

Total 252 security vulnerabilities recorded for libtiff software and firmware.

← Back to All Vendors
CVE-2017-9937 MEDIUM
Component: libtiff

In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service...

📅 2017-06-26
CVSS 6.5 Dossier →
CVE-2017-9936 MEDIUM
Component: libtiff

In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service atta...

📅 2017-06-26
CVSS 6.5 Dossier →
Component: libtiff

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different ...

📅 2017-06-26
CVSS 8.8 Dossier →
CVE-2017-9815 MEDIUM
Component: libtiff

In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a de...

📅 2017-06-22
CVSS 6.5 Dossier →
CVE-2017-9404 MEDIUM
Component: libtiff

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to c...

📅 2017-06-02
CVSS 6.5 Dossier →
CVE-2017-9403 MEDIUM
Component: libtiff

In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a...

📅 2017-06-02
CVSS 6.5 Dossier →
CVE-2017-9147 MEDIUM
Component: libtiff

LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash)...

📅 2017-05-22
CVSS 6.5 Dossier →
CVE-2017-9117 MEDIUM
Component: libtiff

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information h...

📅 2017-05-21
CVSS 4.0 Dossier →
Component: libtiff

The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion f...

📅 2017-05-10
CVSS 5.5 Dossier →
CVE-2016-5322 MEDIUM
Component: libtiff

The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a cr...

📅 2017-04-11
CVSS 5.5 Dossier →
Component: libtiff

LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unsp...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of ...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted im...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote att...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a...

📅 2017-04-09
CVSS 7.8 Dossier →
CVE-2017-7595 MEDIUM
Component: libtiff

The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and applicatio...

📅 2017-04-09
CVSS 5.5 Dossier →
CVE-2017-7594 MEDIUM
Component: libtiff

The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) vi...

📅 2017-04-09
CVSS 5.5 Dossier →
CVE-2017-7593 MEDIUM
Component: libtiff

tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive informati...

📅 2017-04-09
CVSS 5.5 Dossier →
Component: libtiff

The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a ...

📅 2017-04-09
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafte...

📅 2017-03-24
CVSS 7.8 Dossier →
Component: libtiff

tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly h...

📅 2017-03-24
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a craft...

📅 2017-03-24
CVSS 7.8 Dossier →
Page 6 of 11 (252 Total Records)