TI-2026-04164 CVE-2026-4775 · GHSA-cm99-m826-vgg7
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Priority LOW 37
A flaw was found in the libtiff library.
Vulnerabilities
262 records
TI-2025-37935 CVE-2025-61145 · GHSA-5jj2-qhxw-rpq6
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
Priority LOW 24
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
TI-2025-37934 CVE-2025-61144 · GHSA-m6xw-mq4p-x7xv
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
Priority MEDIUM 49
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
TI-2025-37933 CVE-2025-61143 · GHSA-p884-v7p5-5858
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
Priority LOW 24
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
TI-2025-08403 CVE-2025-9165 · GHSA-64vg-6m9q-6vr3
LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
Priority LOW 10
A flaw has been found in LibTIFF 4.7.0.
TI-2025-08208 CVE-2025-8961 · GHSA-7vmv-3r46-2vxx
LibTIFF tiffcrop tiffcrop.c main memory corruption
Priority MEDIUM 55
A weakness has been identified in LibTIFF 4.7.0.
TI-2025-08102 CVE-2025-8851 · GHSA-mcqf-6qjh-v78v
LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow
Priority MEDIUM 55
A vulnerability was determined in LibTIFF up to 4.5.1.
TI-2025-07814 CVE-2025-8534 · GHSA-xgh3-993q-r2x8
libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference
Priority MEDIUM 44
A vulnerability classified as problematic was found in libtiff 4.6.0.
TI-2024-12983 CVE-2024-13978 · GHSA-p48p-6mxj-w7jx
LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference
Priority MEDIUM 44
A vulnerability was found in LibTIFF up to 4.7.0.
TI-2025-07482 CVE-2025-8177 · GHSA-w743-578r-x56m
LibTIFF thumbnail.c setrow buffer overflow
Priority MEDIUM 55
A vulnerability was found in LibTIFF up to 4.7.0.
TI-2025-07481 CVE-2025-8176 · GHSA-gvgc-3ch5-px8p
LibTIFF tiffmedian.c get_histogram use after free
Priority MEDIUM 55
A vulnerability was found in LibTIFF up to 4.7.0.
TI-2024-06501 CVE-2024-7006 · GHSA-r7x8-hv2q-v9r7
Libtiff: null pointer dereference in tif_dirinfo.c
Priority MEDIUM 42
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`.
TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
Priority HIGH 72
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.
TI-2023-28738 CVE-2023-52355 · GHSA-fh6j-mgh8-7prh
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
Priority LOW 36
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.
TI-2023-05719 CVE-2023-6228 · GHSA-4v5g-xjvw-59g6
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
Priority LOW 25
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
TI-2023-05765 CVE-2023-6277 · GHSA-fq8g-55cp-756j
Libtiff: out-of-memory in tiffopen via a craft file
Priority HIGH 68
An out-of-memory flaw was found in libtiff.
TI-2023-02964 CVE-2023-3164 · GHSA-2x8c-h7r9-r6m6
Heap-buffer-overflow in extractimagesection()
Priority MEDIUM 58
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801.
TI-2023-21784 CVE-2023-41175 · GHSA-hjwh-g78g-5xvp
Libtiff: potential integer overflow in raw2tiff.c
Priority LOW 33
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c.
TI-2023-21518 CVE-2023-40745 · GHSA-w737-xjxg-h9mw
Libtiff: integer overflow in tiffcp.c
Priority LOW 32
LibTIFF is vulnerable to an integer overflow.
TI-2023-03338 CVE-2023-3576 · GHSA-qfgr-f5j7-2xxf
Libtiff: memory leak in tiffcrop.c
Priority LOW 25
A memory leak flaw was found in Libtiff's tiffcrop utility.
TI-2022-18986 CVE-2022-40090 · GHSA-279f-f7v7-h5h8
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows…
Priority MEDIUM 62
An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.
TI-2020-13468 CVE-2020-18768 · GHSA-mqcp-f5vw-2vmj
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10…
Priority MEDIUM 58
There exists one heap buffer overflow in _TIFFmemcpy in tif_unix.c in libtiff 4.0.10, which allows an attacker to cause a denial-of-service through a crafted tiff file.
TI-2023-03377 CVE-2023-3618 · GHSA-jgp5-27vm-42q7
Segmentation fault in fax3encode in libtiff/tif_fax3.c
Priority LOW 31
A flaw was found in libtiff.
TI-2023-02726 CVE-2023-2908 · GHSA-7278-8hvx-pp94
Libtiff: null pointer dereference in tif_dir.c
Priority LOW 25
A null pointer dereference issue was found in Libtiff's tif_dir.c file.
TI-2023-11848 CVE-2023-26966 · GHSA-wg7m-6ff7-7pcj
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a…
Priority MEDIUM 58
libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.