CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Libtiff » Libtiff » * * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*
CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2023-0804 787 2023-02-13 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
2 CVE-2023-0803 787 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
3 CVE-2023-0802 787 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
4 CVE-2023-0801 787 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
5 CVE-2023-0800 787 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.
6 CVE-2023-0799 416 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
7 CVE-2023-0798 125 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
8 CVE-2023-0797 125 2023-02-13 2023-02-27
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
9 CVE-2023-0796 125 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
10 CVE-2023-0795 125 2023-02-13 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.
11 CVE-2022-48281 787 Overflow 2023-01-23 2023-03-02
0.0
 None ??? ??? ??? ??? ??? ???
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
12 CVE-2022-4645 125 2023-03-03 2023-03-16
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
13 CVE-2022-3970 189 Overflow 2022-11-13 2023-03-01
0.0
 None ??? ??? ??? ??? ??? ???
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.
14 CVE-2022-3627 787 2022-10-21 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
15 CVE-2022-3626 787 2022-10-21 2023-01-21
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
16 CVE-2022-3599 125 2022-10-21 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.
17 CVE-2022-3598 787 2022-10-21 2023-01-21
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.
18 CVE-2022-3597 787 2022-10-21 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.
19 CVE-2022-3570 787 Overflow 2022-10-21 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
20 CVE-2022-2953 125 2022-08-29 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8.
21 CVE-2022-2869 125 2022-08-17 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.
22 CVE-2022-2868 20 2022-08-17 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.
23 CVE-2022-2867 125 2022-08-17 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.
24 CVE-2022-1355 121 DoS Overflow 2022-08-31 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
25 CVE-2022-1354 125 DoS Overflow 2022-08-31 2023-02-23
0.0
 None ??? ??? ??? ??? ??? ???
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
26 CVE-2022-0908 476 DoS 2022-03-11 2022-11-07
4.3
 None Remote Medium Not required None None Partial
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
27 CVE-2022-0891 787 Overflow 2022-03-10 2023-02-02
5.8
 None Remote Medium Not required Partial None Partial
A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
28 CVE-2022-0562 476 DoS 2022-02-11 2022-11-16
4.3
 None Remote Medium Not required None None Partial
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.
29 CVE-2022-0561 476 DoS 2022-02-11 2022-11-16
4.3
 None Remote Medium Not required None None Partial
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
30 CVE-2020-35524 787 Exec Code Overflow 2021-03-09 2022-07-30
6.8
 None Remote Medium Not required Partial Partial Partial
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
31 CVE-2020-35523 190 Exec Code Overflow 2021-03-09 2022-07-30
6.8
 None Remote Medium Not required Partial Partial Partial
An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
32 CVE-2020-35522 119 DoS Overflow 2021-03-09 2022-07-30
4.3
 None Remote Medium Not required None None Partial
In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.
33 CVE-2020-35521 119 DoS Overflow 2021-03-09 2022-07-30
4.3
 None Remote Medium Not required None None Partial
A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.
34 CVE-2019-17546 787 Overflow 2019-10-14 2020-08-24
6.8
 None Remote Medium Not required Partial Partial Partial
tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
35 CVE-2019-14973 190 Overflow 2019-08-14 2023-03-02
4.3
 None Remote Medium Not required None None Partial
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.
36 CVE-2018-10963 617 DoS 2018-05-10 2019-10-03
4.3
 None Remote Medium Not required None None Partial
The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.
37 CVE-2018-5360 125 2018-01-14 2019-04-22
6.8
 None Remote Medium Not required Partial Partial Partial
LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.
38 CVE-2017-9937 119 DoS Overflow 2017-06-26 2021-02-25
4.3
 None Remote Medium Not required None None Partial
In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.
39 CVE-2017-9935 125 Exec Code Overflow Mem. Corr. 2017-06-26 2019-10-03
6.8
 None Remote Medium Not required Partial Partial Partial
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.
40 CVE-2016-9532 125 DoS Overflow 2017-02-06 2017-02-08
4.3
 None Remote Medium Not required None None Partial
Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.
41 CVE-2016-9453 787 DoS Exec Code 2017-01-27 2019-12-31
6.8
 None Remote Medium Not required Partial Partial Partial
The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.
42 CVE-2016-6223 189 DoS +Info 2017-01-23 2017-11-04
6.4
 None Remote Low Not required Partial None Partial
The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of service (crash) or possibly obtain sensitive information via a negative index in a file-content buffer.
43 CVE-2016-5323 369 DoS 2017-01-20 2018-10-30
5.0
 None Remote Low Not required None None Partial
The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.
44 CVE-2016-5322 125 DoS 2017-04-11 2017-04-17
4.3
 None Remote Medium Not required None None Partial
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.
45 CVE-2016-5321 119 DoS Overflow 2017-01-20 2018-10-30
4.3
 None Remote Medium Not required None None Partial
The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.
46 CVE-2016-5319 119 Overflow 2017-01-20 2017-07-01
4.3
 None Remote Medium Not required None None Partial
Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.
47 CVE-2016-5318 119 Overflow 2017-01-20 2018-03-28
4.3
 None Remote Medium Not required None None Partial
Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
48 CVE-2016-5316 125 2017-01-20 2018-10-30
4.3
 None Remote Medium Not required None None Partial
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.
49 CVE-2016-5315 125 DoS 2017-03-07 2017-03-08
4.3
 None Remote Medium Not required None None Partial
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image.
50 CVE-2016-5314 787 DoS Overflow 2018-03-12 2018-04-05
6.8
 None Remote Medium Not required Partial Partial Partial
Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer with rgb2ycbcr.
Total number of vulnerabilities : 99   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.