Skip to content
Noroxi

libtiff records

262 published records for vendor libtiff. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.4%
Pre-auth RCE
37
With a fix record
98.9%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

262 records
  • CVE-2006-3459
    47Plan

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow co

    HighCVSS 7.5WeaponizedEPSS 56%

    libtiff · libtiffAug 2, 2006

  • CVE-2004-1308
    44Plan

    Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a

    CriticalCVSS 10.0No exploitEPSS 14%

    libtiff · libtiffJan 10, 2005

  • CVE-2015-8668
    43Plan

    Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attack

    CriticalCVSS 9.8No exploitEPSS 13%

    libtiff · libtiffJan 8, 2016

  • CVE-2018-12900
    42Plan

    Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.

    HighCVSS 8.8No exploitEPSS 24%

    libtiff · libtiffJun 26, 2018

  • CVE-2004-0929
    42Plan

    Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT

    CriticalCVSS 10.0No exploitEPSS 8%

    libtiff · libtiffJan 27, 2005

  • CVE-2016-9535
    40Plan

    tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in r

    CriticalCVSS 9.8No exploitEPSS 4%

    libtiff · libtiffNov 22, 2016

  • CVE-2015-7554
    40Plan

    The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or

    CriticalCVSS 9.8No exploitEPSS 4%

    libtiff · libtiffJan 8, 2016

  • CVE-2016-9540
    40Plan

    tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width.

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9538
    40Plan

    tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow.

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9533
    40Plan

    tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers.

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9534
    40Plan

    tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members.

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9539
    40Plan

    tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer().

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9536
    40Plan

    tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip().

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2016-9537
    40Plan

    tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers.

    CriticalCVSS 9.8No exploitEPSS 3%

    libtiff · libtiffNov 22, 2016

  • CVE-2018-18557
    39Monitor

    LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,

    HighCVSS 8.8Proof of conceptEPSS 14%

    libtiff · libtiffOct 22, 2018

  • CVE-2017-17095
    38Monitor

    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow

    HighCVSS 8.8Proof of conceptEPSS 10%

    libtiff · libtiffDec 2, 2017

  • CVE-2009-2347
    38Monitor

    Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attacke

    CriticalCVSS 9.3No exploitEPSS 4%

    libtiff · libtiffJul 14, 2009

  • CVE-2016-6223
    37Monitor

    The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows remote attackers to cause a denial of serv

    CriticalCVSS 9.1No exploitEPSS 3%

    libtiff · libtiffJan 23, 2017

  • CVE-2016-5314
    36Monitor

    Buffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of s

    HighCVSS 8.8No exploitEPSS 4%

    libtiff · libtiffMar 11, 2018

  • CVE-2017-5225
    36Monitor

    LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSa

    HighCVSS 8.8No exploitEPSS 4%

    libtiff · libtiffJan 12, 2017

  • CVE-2018-17795
    36Monitor

    The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of service (heap-based buffe

    HighCVSS 8.8No exploitEPSS 4%

    libtiff · libtiffSep 30, 2018

  • CVE-2017-11335
    36Monitor

    There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hun

    HighCVSS 8.8No exploitEPSS 3%

    libtiff · libtiffJul 17, 2017

  • CVE-2018-15209
    36Monitor

    ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer over

    HighCVSS 8.8No exploitEPSS 3%

    libtiff · libtiffAug 8, 2018

  • CVE-2017-9935
    36Monitor

    In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c.

    HighCVSS 8.8No exploitEPSS 3%

    libtiff · libtiffJun 26, 2017

  • CVE-2019-6128
    36Monitor

    The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

    HighCVSS 8.8No exploitEPSS 3%

    libtiff · libtiffJan 11, 2019