Search for packages
| purl | pkg:deb/debian/tiff@4.5.0-6%2Bdeb12u3 |
| Next non-vulnerable version | 4.5.0-6+deb12u4 |
| Latest non-vulnerable version | 4.7.1-2 |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-38sj-85gt-sfhe
Aliases: CVE-2023-3164 |
Out-of-bounds Write A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-4mhv-7vrm-v7hv
Aliases: CVE-2023-1916 |
Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-7zdy-fxq2-p7gf
Aliases: CVE-2025-61145 |
libtiff: libtiff: Denial of service via double free in tiffcrop.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9grz-pkwb-3kc5
Aliases: CVE-2025-61144 |
libtiff: libtiff: Denial of Service via buffer overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-a8jf-xmj8-cuh6
Aliases: CVE-2023-52355 |
This advisory is a False-Positive and has been removed as it only impacted documentation. |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-b4hb-cxzy-suck
Aliases: CVE-2024-13978 |
libtiff: LibTIFF Null Pointer Dereference |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-d8kh-h6vs-gqd4
Aliases: CVE-2025-8961 |
libtiff: LibTIFF memory corruption |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-dg96-zmw1-8kcp
Aliases: CVE-2025-8534 |
libtiff: Libtiff Null Pointer Dereference Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ndc5-qn5u-3qbq
Aliases: CVE-2025-8851 |
libtiff: LibTIFF Stack-based buffer overflow |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-r186-xqyn-ffey
Aliases: CVE-2025-61143 |
libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-rp7t-x7gz-9udg
Aliases: CVE-2023-6228 |
libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-sqxq-hg7v-d7gv
Aliases: CVE-2025-8177 |
libtiff: LibTIFF Buffer Overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ttb7-w41r-4kfn
Aliases: CVE-2026-4775 |
libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ukgj-45m7-6uba
Aliases: CVE-2023-6277 |
libtiff: Out-of-memory in TIFFOpen via a craft file |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
|
VCID-vju4-pghv-47bx
Aliases: CVE-2025-8176 |
libtiff: LibTIFF Use-After-Free Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-yfxw-tmnn-byc6
Aliases: CVE-2025-9165 |
libtiff: LibTIFF memory leak |
Affected by 0 other vulnerabilities. Affected by 7 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1hfc-b4qr-jqgk | Loop with Unreachable Exit Condition ('Infinite Loop') An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file. |
CVE-2022-40090
|
| VCID-1nme-2pjx-q7hp | libtiff: NULL pointer dereference in tif_dirinfo.c |
CVE-2024-7006
|
| VCID-2ds7-xq64-9ue2 | NULL Pointer Dereference A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. |
CVE-2023-3316
|
| VCID-6dt6-ppka-b3ct | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. |
CVE-2023-26966
|
| VCID-b4hb-cxzy-suck | libtiff: LibTIFF Null Pointer Dereference |
CVE-2024-13978
|
| VCID-h9ap-xxmw-j7dr | Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd. |
CVE-2022-1056
|
| VCID-k8kt-55y9-qyac | NULL Pointer Dereference A null pointer dereference issue was discovered in Libtiff's tif_dir.c file. This flaw allows an attacker to pass a crafted TIFF image file to the tiffcp utility, which triggers runtime error, causing an undefined behavior, resulting in an application crash, eventually leading to a denial of service. |
CVE-2023-2908
|
| VCID-n3ta-dm1y-gya5 | libtiff: Libtiff Write-What-Where |
CVE-2025-9900
|
| VCID-ndwc-beev-43ck | Out-of-bounds Write loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. |
CVE-2023-26965
|
| VCID-ttb7-w41r-4kfn | libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing |
CVE-2026-4775
|
| VCID-ua38-ur2u-eues | Out-of-bounds Write A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service. |
CVE-2023-52356
|
| VCID-v4rx-c1w4-pbb3 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service. |
CVE-2023-3618
|
| VCID-vrtj-45t6-cqec | Out-of-bounds Write A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c. |
CVE-2023-30775
|
| VCID-z1vf-mhw2-ducs | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV. |
CVE-2023-25433
|