Libtiff Libtiff vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Libtiff Libtiff: 4 record(s), with affected versions and fixes.
cpe:2.3:a:libtiff:libtiff

CVE-2026-4775 High · 7.8 CWE-190 Mar 24, 2026

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVE-2025-61145 Medium · 5.0 CWE-415 Feb 23, 2026

Double Free in Libtiff

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

CVE-2025-61144 High · 7.3 CWE-119 Feb 23, 2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Libtiff

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

CVE-2025-61143 Medium · 5.5 CWE-476 Feb 23, 2026

NULL Pointer Dereference in Libtiff

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.