Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u4?distro=trixie
purl pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u4?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-2u8w-cy3j-9fen Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0800
VCID-44zu-mtmq-57cm Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0801
VCID-4egk-vvjq-dyhw Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0795
VCID-4pys-mah6-hfh6 Use After Free LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0799
VCID-b33v-b6h4-cqfe Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0804
VCID-cw7d-us77-2fhv Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0796
VCID-cwen-8yyj-x3aw Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. CVE-2023-25434
VCID-pnpt-r4ke-fufh Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0803
VCID-tg7w-mbkg-7uhj Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0798
VCID-wza2-4rcj-hkcd Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0797
VCID-x9xf-wuyn-6ffg Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0802
VCID-xmwn-vxux-h7g3 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. CVE-2023-25435

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:56:57.185187+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:47:07.967462+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:22:23.306606+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:05:14.128810+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:04:24.058980+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:32:40.973287+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:15:12.443609+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:14:52.188622+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:14:20.678578+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:13:55.446639+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:00:33.169943+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:57:25.462933+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:25:32.308868+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:17:52.814372+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:59:17.805832+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:46:11.729299+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:45:32.044356+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:21:48.324778+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:12.726565+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:01.209058+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:44.536162+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:29.242699+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:02:26.201799+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:00:35.058107+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:55:14.410021+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.362735+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.208393+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.152146+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.095193+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.038086+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.982230+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.926764+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.871069+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.815368+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.759768+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.705027+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.1.0