Read the docs

libtiff

Records262All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high83CVSS 7.0–8.9

Exploited now

libtiff records in CISA KEV

No libtiff vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

262 records

TI-2022-03286 CVE-2022-3570 · GHSA-w3vw-h42p-vjw6

Out-of-bounds write in libtiff

Priority HIGH 67

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash…

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00526 Published 2022-10-21 Partial fix CWE-787
TI-2023-00764 CVE-2023-0804 · GHSA-wq4c-r2c3-fv9c

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00763 CVE-2023-0803 · GHSA-2rv8-rcwh-2x8r

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00762 CVE-2023-0802 · GHSA-rxvx-wrgw-qpv7

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00761 CVE-2023-0801 · GHSA-29xc-g6f6-8cf9

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00760 CVE-2023-0800 · GHSA-5wrv-vvhx-3wgq

Out-of-bounds write in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00428 Published 2023-02-13 Partial fix CWE-787
TI-2023-00759 CVE-2023-0799 · GHSA-9xvv-g7xh-f2qr

Use after free in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00425 Published 2023-02-13 Partial fix CWE-416
TI-2023-00758 CVE-2023-0798 · GHSA-xmcc-cx53-xxg3

Out-of-bounds read in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00421 Published 2023-02-13 Partial fix CWE-125
TI-2023-00757 CVE-2023-0797 · GHSA-9qfj-r558-84rj

Out-of-bounds read in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00421 Published 2023-02-13 Partial fix CWE-125
TI-2023-00756 CVE-2023-0796 · GHSA-m222-cmhp-v9m7

Out-of-bounds read in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00421 Published 2023-02-13 Partial fix CWE-125
TI-2023-00755 CVE-2023-0795 · GHSA-cjrm-898p-cxjr

Out-of-bounds read in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00421 Published 2023-02-13 Partial fix CWE-125
TI-2022-04245 CVE-2022-4645 · GHSA-6fr2-gj2w-xgr6

Out-of-bounds read in libtiff

Priority MEDIUM 63

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00425 Published 2023-03-03 Partial fix CWE-125
TI-2022-03337 CVE-2022-3627 · GHSA-g8h6-gmhw-mc7m

Out-of-bounds write in libtiff

Priority MEDIUM 62

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01377 Published 2022-10-21 Partial fix CWE-787
TI-2022-03312 CVE-2022-3599 · GHSA-6cg2-4798-gw4g

Out-of-bounds read in libtiff

Priority MEDIUM 62

LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01274 Published 2022-10-21 Partial fix CWE-125
TI-2022-03311 CVE-2022-3598 · GHSA-4cf4-hqwp-cpp8

Out-of-bounds write in libtiff

Priority MEDIUM 62

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0127 Published 2022-10-21 Partial fix CWE-787
TI-2022-03310 CVE-2022-3597 · GHSA-579p-3xv7-xhp3

Out-of-bounds write in libtiff

Priority MEDIUM 62

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01274 Published 2022-10-21 Partial fix CWE-787
TI-2022-01098 CVE-2022-1210 · GHSA-3h6x-gjf3-36gg

LibTIFF tiff2ps resource consumption

Priority MEDIUM 62

A vulnerability classified as problematic was found in LibTIFF 4.3.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01843 Published 2022-04-03 No fix listed CWE-400
Priority MEDIUM 59

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4bet…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.2483 Published 2018-06-26 Partial fix CWE-787
Load more
Open these records in search →