Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/tiff@4.7.0-1?distro=trixie
purl pkg:deb/debian/tiff@4.7.0-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-38sj-85gt-sfhe Out-of-bounds Write A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. CVE-2023-3164
VCID-4mhv-7vrm-v7hv Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. CVE-2023-1916
VCID-ndc5-qn5u-3qbq libtiff: LibTIFF Stack-based buffer overflow CVE-2025-8851
VCID-rp7t-x7gz-9udg libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c CVE-2023-6228

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T07:55:15.630141+00:00 Debian Importer Fixing VCID-ndc5-qn5u-3qbq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:15.240957+00:00 Debian Importer Fixing VCID-rp7t-x7gz-9udg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.820374+00:00 Debian Importer Fixing VCID-38sj-85gt-sfhe https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:55:14.259541+00:00 Debian Importer Fixing VCID-4mhv-7vrm-v7hv https://security-tracker.debian.org/tracker/data/json 38.1.0