Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/tiff@4.5.0-5?distro=trixie
purl pkg:deb/debian/tiff@4.5.0-5?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (13)
Vulnerability Summary Aliases
VCID-2ds7-xq64-9ue2 NULL Pointer Dereference A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. CVE-2023-3316
VCID-2u8w-cy3j-9fen Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0800
VCID-44zu-mtmq-57cm Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0801
VCID-4egk-vvjq-dyhw Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0795
VCID-4pys-mah6-hfh6 Use After Free LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0799
VCID-b33v-b6h4-cqfe Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0804
VCID-cw7d-us77-2fhv Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0796
VCID-cwen-8yyj-x3aw Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. CVE-2023-25434
VCID-pnpt-r4ke-fufh Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0803
VCID-tg7w-mbkg-7uhj Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0798
VCID-wza2-4rcj-hkcd Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e. CVE-2023-0797
VCID-x9xf-wuyn-6ffg Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127. CVE-2023-0802
VCID-xmwn-vxux-h7g3 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. CVE-2023-25435

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:56:57.201335+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:47:07.978965+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:22:23.320565+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:05:14.143043+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:04:24.073197+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:32:40.987382+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:16:41.766199+00:00 Debian Importer Fixing VCID-2ds7-xq64-9ue2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:15:12.459436+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:14:52.203147+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:14:20.692718+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:13:55.460647+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:00:33.179995+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:57:25.477990+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:25:32.322612+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:17:52.825743+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:59:17.820118+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:46:11.743807+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:45:32.057473+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:21:48.338295+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:12:02.630926+00:00 Debian Importer Fixing VCID-2ds7-xq64-9ue2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:12.741085+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:11:01.224774+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:44.550029+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:10:29.256916+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:02:26.212342+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:00:35.072656+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:55:14.853781+00:00 Debian Importer Fixing VCID-2ds7-xq64-9ue2 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.396670+00:00 Debian Importer Fixing VCID-xmwn-vxux-h7g3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.349332+00:00 Debian Importer Fixing VCID-cwen-8yyj-x3aw https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.192533+00:00 Debian Importer Fixing VCID-b33v-b6h4-cqfe https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.135874+00:00 Debian Importer Fixing VCID-pnpt-r4ke-fufh https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.078450+00:00 Debian Importer Fixing VCID-x9xf-wuyn-6ffg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.022162+00:00 Debian Importer Fixing VCID-44zu-mtmq-57cm https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.966375+00:00 Debian Importer Fixing VCID-2u8w-cy3j-9fen https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.910799+00:00 Debian Importer Fixing VCID-4pys-mah6-hfh6 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.855028+00:00 Debian Importer Fixing VCID-tg7w-mbkg-7uhj https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.799441+00:00 Debian Importer Fixing VCID-wza2-4rcj-hkcd https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.744102+00:00 Debian Importer Fixing VCID-cw7d-us77-2fhv https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:13.688037+00:00 Debian Importer Fixing VCID-4egk-vvjq-dyhw https://security-tracker.debian.org/tracker/data/json 38.1.0