Libtiff
Page 2 of 3 — Libtiff CVEs from a corpus of 206, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12900 | High | 8.8 | 2018-06-26 | Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alp… |
CVE-2018-10963 | Medium | 6.5 | 2018-05-10 | The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and app… |
CVE-2018-10801 | Medium | 6.5 | 2018-05-08 | TIFFClientOpen in tif_unix.c in LibTIFF 3.8.2 has memory leaks, as demonstrated by bmp2tiff. |
CVE-2018-10779 | Medium | 6.5 | 2018-05-07 | TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff. |
CVE-2018-10126 | Medium | 6.5 | 2018-04-21 | ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdcti… |
CVE-2018-8905 | High | 8.8 | 2018-03-22 | In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps. |
CVE-2016-5314 | High | 8.8 | 2018-03-12 | Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application… |
CVE-2014-8130 | Medium | 6.5 | 2018-03-12 | The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero… |
CVE-2014-8129 | High | 8.8 | 2018-03-12 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as… |
CVE-2018-7456 | Medium | 6.5 | 2018-02-24 | A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0… |
CVE-2018-5784 | Medium | 6.5 | 2018-01-19 | In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerabili… |
CVE-2018-5360 | High | 8.8 | 2018-01-14 | LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in G… |
CVE-2017-18013 | Medium | 6.5 | 2018-01-01 | In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. |
CVE-2017-17973 | High | 8.8 | 2017-12-29 | In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reprodu… |
CVE-2017-17942 | High | 8.8 | 2017-12-28 | In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c. |
CVE-2017-17095 | High | 8.8 | 2017-12-02 | tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application cr… |
CVE-2017-13727 | Medium | 6.5 | 2017-08-29 | There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted inpu… |
CVE-2017-13726 | Medium | 6.5 | 2017-08-29 | There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will… |
CVE-2017-12944 | High | 7.5 | 2017-08-18 | The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial… |
CVE-2017-11613 | Medium | 6.5 | 2017-07-26 | In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a denial of service attack. During the TIFF… |
CVE-2017-11335 | High | 8.8 | 2017-07-17 | There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes out-of-b… |
CVE-2017-10688 | High | 7.5 | 2017-06-29 | In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input will lead to a remote de… |
CVE-2014-8127 | Medium | 6.5 | 2017-06-26 | LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkInkNamesString funct… |
CVE-2017-9937 | Medium | 6.5 | 2017-06-26 | In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack. |
CVE-2017-9936 | Medium | 6.5 | 2017-06-26 | In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack. |
CVE-2017-9935 | High | 8.8 | 2017-06-26 | In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages… |
CVE-2017-9815 | Medium | 6.5 | 2017-06-22 | In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of s… |
CVE-2017-9404 | Medium | 6.5 | 2017-06-02 | In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a de… |
CVE-2017-9403 | Medium | 6.5 | 2017-06-02 | In LibTIFF 4.0.7, a memory leak vulnerability was found in the function TIFFReadDirEntryLong8Array in tif_dirread.c, which allows attackers to cause a denial o… |
CVE-2017-9147 | Medium | 6.5 | 2017-05-22 | LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of service (crash) via a cr… |
CVE-2017-9117 | Medium | 4.0 | 2017-05-21 | In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header mat… |
CVE-2016-10371 | Medium | 5.5 | 2017-05-10 | The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure an… |
CVE-2016-5322 | Medium | 5.5 | 2017-04-11 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif… |
CVE-2017-7602 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified o… |
CVE-2017-7601 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (… |
CVE-2017-7600 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a… |
CVE-2017-7599 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7598 | High | 7.8 | 2017-04-09 | tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. |
CVE-2017-7597 | High | 7.8 | 2017-04-09 | tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to… |
CVE-2017-7596 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7595 | Medium | 5.5 | 2017-04-09 | The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash)… |
CVE-2017-7594 | Medium | 5.5 | 2017-04-09 | The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a craft… |
CVE-2017-7593 | Medium | 5.5 | 2017-04-09 | tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from p… |
CVE-2017-7592 | High | 7.8 | 2017-04-09 | The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of… |
CVE-2016-10272 | High | 7.8 | 2017-03-24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF im… |
CVE-2016-10271 | High | 7.8 | 2017-03-24 | tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspe… |
CVE-2016-10270 | High | 7.8 | 2017-03-24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF i… |
CVE-2016-10269 | High | 7.8 | 2017-03-24 | LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to caus… |
CVE-2016-10268 | High | 7.8 | 2017-03-24 | tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unsp… |
CVE-2016-10267 | Medium | 5.5 | 2017-03-24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/ti… |
CVE-2016-10266 | Medium | 5.5 | 2017-03-24 | LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/ti… |
CVE-2015-7313 | Medium | 5.5 | 2017-03-17 | LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file. |
CVE-2016-5315 | Medium | 5.5 | 2017-03-07 | The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif… |
CVE-2016-10095 | Medium | 5.5 | 2017-03-01 | Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0… |
CVE-2016-10094 | High | 7.8 | 2017-03-01 | Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a cra… |
CVE-2016-10093 | High | 7.8 | 2017-03-01 | Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2… |
CVE-2016-10092 | High | 7.8 | 2017-03-01 | Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alph… |
CVE-2016-9532 | Medium | 5.5 | 2017-02-06 | Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of… |
CVE-2016-5102 | Medium | 5.5 | 2017-02-06 | Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmenta… |
CVE-2016-9453 | High | 7.8 | 2017-01-27 | The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute a… |
CVE-2016-9448 | High | 7.5 | 2017-01-27 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags… |
CVE-2016-6223 | Critical | 9.1 | 2017-01-23 | The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or poss… |
CVE-2017-5563 | High | 8.8 | 2017-01-23 | LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution via a crafted bmp image to tools/bmp2tiff. |
CVE-2016-5323 | High | 7.5 | 2017-01-20 | The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a… |
CVE-2016-5321 | Medium | 6.5 | 2017-01-20 | The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image. |
CVE-2016-5319 | Medium | 6.5 | 2017-01-20 | Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file. |
CVE-2016-5318 | Medium | 6.5 | 2017-01-20 | Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff. |
CVE-2016-5317 | Medium | 6.5 | 2017-01-20 | Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows att… |
CVE-2016-5316 | Medium | 6.5 | 2017-01-20 | Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a… |
CVE-2016-9297 | High | 7.5 | 2017-01-18 | The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted TIFF_SETGET_C16ASCII or… |
CVE-2016-9273 | Medium | 5.5 | 2017-01-18 | tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF… |
CVE-2017-5225 | High | 8.8 | 2017-01-12 | LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value. |
CVE-2016-5652 | High | 7.0 | 2017-01-06 | An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based bu… |
CVE-2015-8870 | High | 7.4 | 2016-12-06 | Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows remote attackers to cause a denial of service (heap-based buffer over-read), or possibly ob… |
CVE-2016-9540 | Critical | 9.8 | 2016-11-22 | tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile h… |
CVE-2016-9539 | Critical | 9.8 | 2016-11-22 | tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092. |
CVE-2016-9538 | Critical | 9.8 | 2016-11-22 | tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100. |
CVE-2016-9537 | Critical | 9.8 | 2016-11-22 | tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097. |
CVE-2016-9536 | Critical | 9.8 | 2016-11-22 | tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t… |
CVE-2016-9535 | Critical | 9.8 | 2016-11-22 | tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when d… |
CVE-2016-9534 | Critical | 9.8 | 2016-11-22 | tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. Reported as MSVR 35… |
CVE-2016-9533 | Critical | 9.8 | 2016-11-22 | tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference h… |
CVE-2016-8331 | High | 8.1 | 2016-10-28 | An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type c… |
CVE-2016-3658 | High | 7.5 | 2016-10-03 | The TIFFWriteDirectoryTagLongLong8Array function in tif_dirwrite.c in the tiffset tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial o… |
CVE-2016-3634 | High | 7.5 | 2016-10-03 | The tagCompare function in tif_dirinfo.c in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds… |
CVE-2016-3633 | High | 7.5 | 2016-10-03 | The setrow function in the thumbnail tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via vectors re… |
CVE-2016-3631 | High | 7.5 | 2016-10-03 | The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bound… |
CVE-2016-3625 | Medium | 6.5 | 2016-10-03 | tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image. |
CVE-2016-3624 | High | 7.5 | 2016-10-03 | The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting… |
CVE-2016-3623 | High | 7.5 | 2016-10-03 | The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter t… |
CVE-2016-3622 | Medium | 6.5 | 2016-10-03 | The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero err… |
CVE-2016-3621 | High | 8.8 | 2016-10-03 | The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a den… |
CVE-2016-3620 | High | 7.5 | 2016-10-03 | The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a den… |
CVE-2016-3619 | Medium | 6.5 | 2016-10-03 | The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to… |
CVE-2016-3991 | High | 7.8 | 2016-09-21 | Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (ou… |
CVE-2016-3990 | High | 7.8 | 2016-09-21 | Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of se… |
CVE-2016-3945 | High | 7.8 | 2016-09-21 | Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, a… |
CVE-2016-3632 | High | 7.8 | 2016-09-21 | The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute… |
CVE-2016-3186 | Medium | 6.2 | 2016-04-19 | Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a cra… |
CVE-2015-8784 | Medium | 6.5 | 2016-04-13 | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demons… |