Search for packages
| purl | pkg:deb/debian/tiff@4.7.0-3%2Bdeb13u1 |
| Next non-vulnerable version | 4.7.0-3+deb13u2 |
| Latest non-vulnerable version | 4.7.1-2 |
| Risk | 3.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7zdy-fxq2-p7gf
Aliases: CVE-2025-61145 |
libtiff: libtiff: Denial of service via double free in tiffcrop.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9grz-pkwb-3kc5
Aliases: CVE-2025-61144 |
libtiff: libtiff: Denial of Service via buffer overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-dg96-zmw1-8kcp
Aliases: CVE-2025-8534 |
libtiff: Libtiff Null Pointer Dereference Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-r186-xqyn-ffey
Aliases: CVE-2025-61143 |
libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-sqxq-hg7v-d7gv
Aliases: CVE-2025-8177 |
libtiff: LibTIFF Buffer Overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ttb7-w41r-4kfn
Aliases: CVE-2026-4775 |
libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-vju4-pghv-47bx
Aliases: CVE-2025-8176 |
libtiff: LibTIFF Use-After-Free Vulnerability |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-38sj-85gt-sfhe | Out-of-bounds Write A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. |
CVE-2023-3164
|
| VCID-4mhv-7vrm-v7hv | Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. |
CVE-2023-1916
|
| VCID-a8jf-xmj8-cuh6 | This advisory is a False-Positive and has been removed as it only impacted documentation. |
CVE-2023-52355
|
| VCID-b4hb-cxzy-suck | libtiff: LibTIFF Null Pointer Dereference |
CVE-2024-13978
|
| VCID-d8kh-h6vs-gqd4 | libtiff: LibTIFF memory corruption |
CVE-2025-8961
|
| VCID-ndc5-qn5u-3qbq | libtiff: LibTIFF Stack-based buffer overflow |
CVE-2025-8851
|
| VCID-rp7t-x7gz-9udg | libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c |
CVE-2023-6228
|
| VCID-ukgj-45m7-6uba | libtiff: Out-of-memory in TIFFOpen via a craft file |
CVE-2023-6277
|
| VCID-yfxw-tmnn-byc6 | libtiff: LibTIFF memory leak |
CVE-2025-9165
|