Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/libtiff@4.4.0-1
purl pkg:alpm/archlinux/libtiff@4.4.0-1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (19)
Vulnerability Summary Fixed by
VCID-1mh3-q3y5-qyg1
Aliases:
CVE-2022-1622
Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. There are no reported fixed by versions.
VCID-44ee-ueju-ykae
Aliases:
CVE-2022-2057
libtiff: division by zero issues in tiffcrop There are no reported fixed by versions.
VCID-48tr-y71p-7fbb
Aliases:
CVE-2022-2520
libtiff: Assertion fail in rotateImage() function at tiffcrop.c There are no reported fixed by versions.
VCID-6kck-g3z6-cuge
Aliases:
CVE-2022-2867
libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c There are no reported fixed by versions.
VCID-6wzx-7a3m-ufhm
Aliases:
CVE-2022-3627
libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c There are no reported fixed by versions.
VCID-72yx-48n1-jbfs
Aliases:
CVE-2022-1623
Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. There are no reported fixed by versions.
VCID-76g4-kacn-7yg7
Aliases:
CVE-2022-2519
libtiff: Double free or corruption in rotateImage() function at tiffcrop.c There are no reported fixed by versions.
VCID-8691-q4h3-eyaf
Aliases:
CVE-2022-2058
libtiff: division by zero issues in tiffcrop There are no reported fixed by versions.
VCID-ap6w-9c6j-akdp
Aliases:
CVE-2022-2521
libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c There are no reported fixed by versions.
VCID-e6c2-ajs1-abdz
Aliases:
CVE-2022-3599
libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c There are no reported fixed by versions.
VCID-jdv4-3mf6-93hm
Aliases:
CVE-2022-3970
libtiff: integer overflow in function TIFFReadRGBATileExt of the file There are no reported fixed by versions.
VCID-ju1t-bhyh-v7du
Aliases:
CVE-2022-48281
Out-of-bounds Write processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. There are no reported fixed by versions.
VCID-ruhz-ty5e-nkgr
Aliases:
CVE-2022-2869
libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() There are no reported fixed by versions.
VCID-s95z-s4sd-cffs
Aliases:
CVE-2022-2056
libtiff: division by zero issues in tiffcrop There are no reported fixed by versions.
VCID-tddn-m5ke-euas
Aliases:
CVE-2022-34526
libtiff: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit There are no reported fixed by versions.
VCID-tfyj-y9q3-t3ar
Aliases:
CVE-2022-2953
libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c There are no reported fixed by versions.
VCID-tgf9-ax81-fub4
Aliases:
CVE-2022-3570
libtiff: heap Buffer overflows in tiffcrop.c There are no reported fixed by versions.
VCID-vzr7-wz88-h7gx
Aliases:
CVE-2022-2868
libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() There are no reported fixed by versions.
VCID-zwbu-yezc-4yck
Aliases:
CVE-2022-3597
libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:23:56.712444+00:00 Arch Linux Importer Affected by VCID-1mh3-q3y5-qyg1 https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.693238+00:00 Arch Linux Importer Affected by VCID-72yx-48n1-jbfs https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.674742+00:00 Arch Linux Importer Affected by VCID-s95z-s4sd-cffs https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.655468+00:00 Arch Linux Importer Affected by VCID-44ee-ueju-ykae https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.636417+00:00 Arch Linux Importer Affected by VCID-8691-q4h3-eyaf https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.616223+00:00 Arch Linux Importer Affected by VCID-76g4-kacn-7yg7 https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.597127+00:00 Arch Linux Importer Affected by VCID-48tr-y71p-7fbb https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.577566+00:00 Arch Linux Importer Affected by VCID-ap6w-9c6j-akdp https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.558356+00:00 Arch Linux Importer Affected by VCID-6kck-g3z6-cuge https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.536811+00:00 Arch Linux Importer Affected by VCID-vzr7-wz88-h7gx https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.516749+00:00 Arch Linux Importer Affected by VCID-ruhz-ty5e-nkgr https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.495803+00:00 Arch Linux Importer Affected by VCID-tfyj-y9q3-t3ar https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.476389+00:00 Arch Linux Importer Affected by VCID-tddn-m5ke-euas https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.455794+00:00 Arch Linux Importer Affected by VCID-tgf9-ax81-fub4 https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.434968+00:00 Arch Linux Importer Affected by VCID-zwbu-yezc-4yck https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.414177+00:00 Arch Linux Importer Affected by VCID-e6c2-ajs1-abdz https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.395528+00:00 Arch Linux Importer Affected by VCID-6wzx-7a3m-ufhm https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.374170+00:00 Arch Linux Importer Affected by VCID-jdv4-3mf6-93hm https://security.archlinux.org/AVG-2842 38.0.0
2026-04-01T18:23:56.354416+00:00 Arch Linux Importer Affected by VCID-ju1t-bhyh-v7du https://security.archlinux.org/AVG-2842 38.0.0