Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libtiff-main@4.7.1-2.1?arch=hum1
purl pkg:rpm/redhat/libtiff-main@4.7.1-2.1?arch=hum1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-7zdy-fxq2-p7gf
Aliases:
CVE-2025-61145
libtiff: libtiff: Denial of service via double free in tiffcrop.c There are no reported fixed by versions.
VCID-9grz-pkwb-3kc5
Aliases:
CVE-2025-61144
libtiff: libtiff: Denial of Service via buffer overflow There are no reported fixed by versions.
VCID-n3ta-dm1y-gya5
Aliases:
CVE-2025-9900
libtiff: Libtiff Write-What-Where There are no reported fixed by versions.
VCID-r186-xqyn-ffey
Aliases:
CVE-2025-61143
libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-21T22:40:26.518096+00:00 RedHat Importer Affected by VCID-n3ta-dm1y-gya5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9900.json 38.4.0
2026-04-21T22:38:51.515018+00:00 RedHat Importer Affected by VCID-r186-xqyn-ffey https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61143.json 38.4.0
2026-04-21T22:38:51.493867+00:00 RedHat Importer Affected by VCID-9grz-pkwb-3kc5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61144.json 38.4.0
2026-04-21T22:38:51.472557+00:00 RedHat Importer Affected by VCID-7zdy-fxq2-p7gf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-61145.json 38.4.0