Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libtiff@4.5.0
purl pkg:conan/libtiff@4.5.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
CVE-2023-1916

Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file … There are no reported fixed by versions.
CVE-2023-25433

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect … There are no reported fixed by versions.
CVE-2023-26965

Out-of-bounds Write loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. There are no reported fixed by versions.
CVE-2023-26966

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when … There are no reported fixed by versions.
CVE-2023-25435

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at … There are no reported fixed by versions.
CVE-2023-25434

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at … There are no reported fixed by versions.
CVE-2023-2908

NULL Pointer Dereference A null pointer dereference issue was discovered in Libtiff's tif_dir.c file. This flaw allows an attacker to … There are no reported fixed by versions.
CVE-2022-48281

Out-of-bounds Write processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via … There are no reported fixed by versions.
Vulnerabilities fixed by this package (13)

Advisory Summary Aliases
CVE-2023-30775
Out-of-bounds Write A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, …
CVE-2023-0795
Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a …
CVE-2023-0802
Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a …
CVE-2023-0796
Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a …
CVE-2023-0804
Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a …
CVE-2023-0803
Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a …
CVE-2022-3970
Integer Overflow or Wraparound A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function …
CVE-2023-2731
NULL Pointer Dereference A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw …
CVE-2023-0798
Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a …
CVE-2023-0801
Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to …
CVE-2023-0799
Use After Free LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via …
CVE-2023-0797
Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to …
CVE-2023-0800
Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a …