LI
Product
libtiff
19
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 12Low 4
Watch
Add libtiff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3618 | 6.5 | Jul 12 | Segmentation fault in fax3encode in libtiff/tif_fax3.c Affected: All versions, or not specified |
| CVE-2022-2521 | 6.5 | Aug 31 | It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and… Affected: libtiff 4.4.0rc1 |
| CVE-2022-2519 | 6.5 | Aug 31 | There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 Affected: libtiff 4.4.0rc1 |
| CVE-2022-2520 | 6.5 | Aug 31 | A flaw was found in libtiff 4.4.0rc1 Affected: libtiff 4.4.0rc1 |
| CVE-2023-1916 | 6.1 | Apr 10 | A flaw was found in tiffcrop, a program distributed by the libtiff package Affected: libtiff versions 4.x and newer are affected |
| CVE-2022-1355 | 6.1 | Aug 31 | A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function Affected: Not-Known |
| CVE-2023-3164 | 5.5 | Nov 2 | Heap-buffer-overflow in extractimagesection() Affected: All versions, or not specified |
| CVE-2023-30775 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 4.0 |
| CVE-2023-30774 | 5.5 | May 19 | A vulnerability was found in the libtiff library Affected: 4.0 |
| CVE-2023-2731 | 5.5 | May 17 | A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file Affected: Fixed in libtiff v4.5.0 |
| CVE-2022-1354 | 5.5 | Aug 31 | A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function Affected: Not-Known |
| CVE-2025-8851 | 5.3 | Aug 11 | LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow Affected: 4.5.0; 4.5.1 |
Showing 12