Vulnerabilidades do Libtiff Libtiff

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Libtiff Libtiff: 4 registro(s), com versões afetadas e correções.
cpe:2.3:a:libtiff:libtiff

CVE-2026-4775 Alta · 7.8 CWE-190 24/03/2026

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.

CVE-2025-61145 Média · 5.0 CWE-415 23/02/2026

Double Free em Libtiff

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

CVE-2025-61144 Alta · 7.3 CWE-119 23/02/2026

Buffer Errors (Improper Restriction of Operations within Memory Bounds) em Libtiff

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

CVE-2025-61143 Média · 5.5 CWE-476 23/02/2026

NULL Pointer Dereference em Libtiff

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.