libtiff Vulnerability Advisory Catalog

Total 252 security vulnerabilities recorded for libtiff software and firmware.

← Back to All Vendors
Component: libtiff

LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attacker...

📅 2017-03-24
CVSS 7.8 Dossier →
Component: libtiff

tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly ...

📅 2017-03-24
CVSS 7.8 Dossier →
Component: libtiff

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to l...

📅 2017-03-24
CVSS 5.5 Dossier →
Component: libtiff

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to l...

📅 2017-03-24
CVSS 5.5 Dossier →
CVE-2015-7313 MEDIUM
Component: libtiff

LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file....

📅 2017-03-17
CVSS 5.5 Dossier →
CVE-2016-5315 MEDIUM
Component: libtiff

The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a cr...

📅 2017-03-07
CVSS 5.5 Dossier →
Component: libtiff

Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4....

📅 2017-03-01
CVSS 5.5 Dossier →
Component: libtiff

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact ...

📅 2017-03-01
CVSS 7.8 Dossier →
Component: libtiff

Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0....

📅 2017-03-01
CVSS 7.8 Dossier →
Component: libtiff

Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, ...

📅 2017-03-01
CVSS 7.8 Dossier →
CVE-2016-9532 MEDIUM
Component: libtiff

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of servic...

📅 2017-02-06
CVSS 5.5 Dossier →
CVE-2016-5102 MEDIUM
Component: libtiff

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service ...

📅 2017-02-06
CVSS 5.5 Dossier →
Component: libtiff

The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly ...

📅 2017-01-27
CVSS 7.8 Dossier →
Component: libtiff

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting ...

📅 2017-01-27
CVSS 7.5 Dossier →
CVE-2016-6223 CRITICAL
Component: libtiff

The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash...

📅 2017-01-23
CVSS 9.1 Dossier →
Component: libtiff

LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/...

📅 2017-01-23
CVSS 8.8 Dossier →
Component: libtiff

The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application cras...

📅 2017-01-20
CVSS 7.5 Dossier →
CVE-2016-5319 MEDIUM
Component: libtiff

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file....

📅 2017-01-20
CVSS 6.5 Dossier →
CVE-2016-5318 MEDIUM
Component: libtiff

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted...

📅 2017-01-20
CVSS 6.5 Dossier →
CVE-2016-5317 MEDIUM
Component: libtiff

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, a...

📅 2017-01-20
CVSS 6.5 Dossier →
CVE-2016-5316 MEDIUM
Component: libtiff

Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by ...

📅 2017-01-20
CVSS 6.5 Dossier →
Component: libtiff

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16...

📅 2017-01-18
CVSS 7.5 Dossier →
CVE-2016-9273 MEDIUM
Component: libtiff

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrip...

📅 2017-01-18
CVSS 5.5 Dossier →
Component: libtiff

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value...

📅 2017-01-12
CVSS 8.8 Dossier →
Page 7 of 11 (252 Total Records)