Search for packages
| purl | pkg:deb/debian/tiff@4.2.0-1%2Bdeb11u5 |
| Next non-vulnerable version | 4.5.0-6+deb12u4 |
| Latest non-vulnerable version | 4.7.1-2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1hfc-b4qr-jqgk
Aliases: CVE-2022-40090 |
Loop with Unreachable Exit Condition ('Infinite Loop') An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. |
Affected by 16 other vulnerabilities. |
|
VCID-1nme-2pjx-q7hp
Aliases: CVE-2024-7006 |
libtiff: NULL pointer dereference in tif_dirinfo.c |
Affected by 16 other vulnerabilities. |
|
VCID-2ds7-xq64-9ue2
Aliases: CVE-2023-3316 |
NULL Pointer Dereference A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. |
Affected by 16 other vulnerabilities. |
|
VCID-38sj-85gt-sfhe
Aliases: CVE-2023-3164 |
Out-of-bounds Write A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-4mhv-7vrm-v7hv
Aliases: CVE-2023-1916 |
Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-6dt6-ppka-b3ct
Aliases: CVE-2023-26966 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. |
Affected by 16 other vulnerabilities. |
|
VCID-7zdy-fxq2-p7gf
Aliases: CVE-2025-61145 |
libtiff: libtiff: Denial of service via double free in tiffcrop.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9grz-pkwb-3kc5
Aliases: CVE-2025-61144 |
libtiff: libtiff: Denial of Service via buffer overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-a8jf-xmj8-cuh6
Aliases: CVE-2023-52355 |
This advisory is a False-Positive and has been removed as it only impacted documentation. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-b4hb-cxzy-suck
Aliases: CVE-2024-13978 |
libtiff: LibTIFF Null Pointer Dereference |
Affected by 16 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-d8kh-h6vs-gqd4
Aliases: CVE-2025-8961 |
libtiff: LibTIFF memory corruption |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-dg96-zmw1-8kcp
Aliases: CVE-2025-8534 |
libtiff: Libtiff Null Pointer Dereference Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-h9ap-xxmw-j7dr
Aliases: CVE-2022-1056 |
Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd. |
Affected by 16 other vulnerabilities. |
|
VCID-k8kt-55y9-qyac
Aliases: CVE-2023-2908 |
NULL Pointer Dereference A null pointer dereference issue was discovered in Libtiff's tif_dir.c file. This flaw allows an attacker to pass a crafted TIFF image file to the tiffcp utility, which triggers runtime error, causing an undefined behavior, resulting in an application crash, eventually leading to a denial of service. |
Affected by 16 other vulnerabilities. |
|
VCID-n3ta-dm1y-gya5
Aliases: CVE-2025-9900 |
libtiff: Libtiff Write-What-Where |
Affected by 16 other vulnerabilities. |
|
VCID-ndc5-qn5u-3qbq
Aliases: CVE-2025-8851 |
libtiff: LibTIFF Stack-based buffer overflow |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-ndwc-beev-43ck
Aliases: CVE-2023-26965 |
Out-of-bounds Write loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. |
Affected by 16 other vulnerabilities. |
|
VCID-r186-xqyn-ffey
Aliases: CVE-2025-61143 |
libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-rp7t-x7gz-9udg
Aliases: CVE-2023-6228 |
libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-sqxq-hg7v-d7gv
Aliases: CVE-2025-8177 |
libtiff: LibTIFF Buffer Overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ttb7-w41r-4kfn
Aliases: CVE-2026-4775 |
libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing |
Affected by 16 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ua38-ur2u-eues
Aliases: CVE-2023-52356 |
Out-of-bounds Write A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service. |
Affected by 16 other vulnerabilities. |
|
VCID-ukgj-45m7-6uba
Aliases: CVE-2023-6277 |
libtiff: Out-of-memory in TIFFOpen via a craft file |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-v4rx-c1w4-pbb3
Aliases: CVE-2023-3618 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service. |
Affected by 16 other vulnerabilities. |
|
VCID-vju4-pghv-47bx
Aliases: CVE-2025-8176 |
libtiff: LibTIFF Use-After-Free Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vrtj-45t6-cqec
Aliases: CVE-2023-30775 |
Out-of-bounds Write A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. |
Affected by 16 other vulnerabilities. |
|
VCID-yfxw-tmnn-byc6
Aliases: CVE-2025-9165 |
libtiff: LibTIFF memory leak |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-z1vf-mhw2-ducs
Aliases: CVE-2023-25433 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV. |
Affected by 16 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-15g8-3ryu-h3ga | Integer Overflow or Wraparound A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. |
CVE-2023-41175
|
| VCID-1mh3-q3y5-qyg1 | Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. |
CVE-2022-1622
|
| VCID-25fx-7kmb-fqhm | Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4. |
CVE-2022-0924
|
| VCID-2u8w-cy3j-9fen | Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. |
CVE-2023-0800
|
| VCID-3wfj-nc9t-xfgp | Integer Overflow or Wraparound LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow. |
CVE-2023-40745
|
| VCID-44ee-ueju-ykae | libtiff: division by zero issues in tiffcrop |
CVE-2022-2057
|
| VCID-44zu-mtmq-57cm | Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. |
CVE-2023-0801
|
| VCID-48tr-y71p-7fbb | libtiff: Assertion fail in rotateImage() function at tiffcrop.c |
CVE-2022-2520
|
| VCID-4egk-vvjq-dyhw | Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. |
CVE-2023-0795
|
| VCID-4mq7-s2p6-yufr | Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2. |
CVE-2022-0907
|
| VCID-4pys-mah6-hfh6 | Use After Free LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. |
CVE-2023-0799
|
| VCID-4srx-3gbk-eqd3 | libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c |
CVE-2022-3626
|
| VCID-5mak-1mkk-wkdg | NULL Pointer Dereference Null source pointer passed as an argument to `memcpy()` function within `TIFFFetchStripThing()` in `tif_dirread.c` in libtiff could lead to Denial of Service via crafted TIFF file. |
CVE-2022-0561
|
| VCID-6cry-skqu-zke9 | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in the execution of arbitrary code. |
CVE-2020-35522
|
| VCID-6kck-g3z6-cuge | libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c |
CVE-2022-2867
|
| VCID-6sb9-u71x-j7f5 | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in the execution of arbitrary code. |
CVE-2020-35523
|
| VCID-6sx9-1yfw-63cg | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in the execution of arbitrary code. |
CVE-2020-35521
|
| VCID-6wzx-7a3m-ufhm | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c |
CVE-2022-3627
|
| VCID-72yx-48n1-jbfs | Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa. |
CVE-2022-1623
|
| VCID-76g4-kacn-7yg7 | libtiff: Double free or corruption in rotateImage() function at tiffcrop.c |
CVE-2022-2519
|
| VCID-8691-q4h3-eyaf | libtiff: division by zero issues in tiffcrop |
CVE-2022-2058
|
| VCID-9gqh-2uat-93c7 | Out-of-bounds Write A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAG_INKNAMES and TIFFTAG_NUMBEROFINKS values. |
CVE-2023-30774
|
| VCID-ap6w-9c6j-akdp | libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c |
CVE-2022-2521
|
| VCID-as9s-4ugc-ukgy | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in denial of service. |
CVE-2022-1354
|
| VCID-b33v-b6h4-cqfe | Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. |
CVE-2023-0804
|
| VCID-bnbg-7q6h-8uhs | Out-of-bounds Write Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c. |
CVE-2023-30086
|
| VCID-cbhv-yme7-buby | libtiff: buffer overflow in TIFFVGetField() in libtiff/tif_dir.c |
CVE-2020-19143
|
| VCID-cm5h-b1g9-tkg9 | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in the execution of arbitrary code. |
CVE-2020-35524
|
| VCID-cw7d-us77-2fhv | Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. |
CVE-2023-0796
|
| VCID-cwen-8yyj-x3aw | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. |
CVE-2023-25434
|
| VCID-e6c2-ajs1-abdz | libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c |
CVE-2022-3599
|
| VCID-gmhp-4yx2-gfbv | Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa. |
CVE-2022-0909
|
| VCID-h6gn-kv5x-bbd5 | Out-of-bounds Write A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out-of-bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact |
CVE-2022-0891
|
| VCID-jdv4-3mf6-93hm | libtiff: integer overflow in function TIFFReadRGBATileExt of the file |
CVE-2022-3970
|
| VCID-ju1t-bhyh-v7du | Out-of-bounds Write processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. |
CVE-2022-48281
|
| VCID-kpq7-5vsv-pucy | NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file. |
CVE-2022-0908
|
| VCID-mhwh-tsst-cfaj | Out-of-bounds Read LibTIFF has an out-of-bounds read in `_TIFFmemcpy` in `tif_unix.c` in certain situations involving a custom tag and `0x0200` as the second word of the `DE` field. |
CVE-2022-22844
|
| VCID-pkdx-ktz1-mbbg | Missing Release of Memory after Effective Lifetime A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service. |
CVE-2023-3576
|
| VCID-pnpt-r4ke-fufh | Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. |
CVE-2023-0803
|
| VCID-qsrb-hf2u-tudp | NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within `TIFFReadDirectory()` in `tif_dirread.c` in libtiff versions from to could lead to Denial of Service via a crafted TIFF file. |
CVE-2022-0562
|
| VCID-rmap-8g2y-abdc | libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c |
CVE-2022-3598
|
| VCID-ruhz-ty5e-nkgr | libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() |
CVE-2022-2869
|
| VCID-s95z-s4sd-cffs | libtiff: division by zero issues in tiffcrop |
CVE-2022-2056
|
| VCID-tddn-m5ke-euas | libtiff: A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit |
CVE-2022-34526
|
| VCID-tfyj-y9q3-t3ar | libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c |
CVE-2022-2953
|
| VCID-tg7w-mbkg-7uhj | Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. |
CVE-2023-0798
|
| VCID-tgf9-ax81-fub4 | libtiff: heap Buffer overflows in tiffcrop.c |
CVE-2022-3570
|
| VCID-ucr1-vp5p-jqck | Multiple vulnerabilities have been found in LibTIFF, the worst of which could result in denial of service. |
CVE-2022-1355
|
| VCID-vu6r-464p-4ue3 | Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125. |
CVE-2022-4645
|
| VCID-vzr7-wz88-h7gx | libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() |
CVE-2022-2868
|
| VCID-wza2-4rcj-hkcd | Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. |
CVE-2023-0797
|
| VCID-x9xf-wuyn-6ffg | Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. |
CVE-2023-0802
|
| VCID-xmwn-vxux-h7g3 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. |
CVE-2023-25435
|
| VCID-zedn-437q-47b2 | Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045. |
CVE-2022-0865
|
| VCID-zwbu-yezc-4yck | libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix |
CVE-2022-3597
|