Advisories · Technology

LibTIFF.

Every CVE that names LibTIFF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-9165 CVE record

CVSS 2.0 Low

LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak
- LibTIFF
- Denial of service
Not analysed yet 19 Aug 2025
CVE-2025-8961 CVE record

CVSS 4.8 Medium

LibTIFF tiffcrop tiffcrop.c main memory corruption
- LibTIFF
- Memory corruption
Not analysed yet 14 Aug 2025
CVE-2025-8851 CVE record

CVSS 4.8 Medium

LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow
- LibTIFF
- Memory corruption
Not analysed yet 11 Aug 2025
CVE-2025-8534 CVE record

CVSS 2.0 Low

libtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference
- libtiff
- Denial of service
- Memory corruption
Not analysed yet 4 Aug 2025
CVE-2024-13978 CVE record

CVSS 2.0 Low

LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference
- LibTIFF
- Denial of service
- Memory corruption
Not analysed yet 1 Aug 2025
CVE-2025-8177 CVE record

CVSS 4.8 Medium

LibTIFF thumbnail.c setrow buffer overflow
- LibTIFF
- Memory corruption
Not analysed yet 26 Jul 2025
CVE-2025-8176 CVE record

CVSS 4.8 Medium

LibTIFF tiffmedian.c get_histogram use after free
- LibTIFF
- Memory corruption
Not analysed yet 26 Jul 2025
CVE-2023-3164 CVE record

CVSS 5.5 Medium

Heap-buffer-overflow in extractimagesection()
- libtiff
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 2 Nov 2023
CVE-2023-3618 CVE record

CVSS 6.5 Medium

Segmentation fault in fax3encode in libtiff/tif_fax3.c
- libtiff
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 12 Jul 2023
CVE-2023-2908 CVE record

CVSS 5.5 Medium

Libtiff: null pointer dereference in tif_dir.c
- Libtiff
- Red Hat Enterprise Linux 6
- Memory corruption
Not analysed yet 30 Jun 2023
CVE-2023-3316 CVE record

CVSS 5.9 Medium

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.
- libtiff
- Memory corruption
Not analysed yet 19 Jun 2023
CVE-2023-30775 CVE record

CVSS 5.5 Medium

Buffer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 19 May 2023
CVE-2023-30774 CVE record

Buffer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 19 May 2023
CVE-2023-2731 CVE record

CVSS 5.5 Medium

NULL pointer dereference in libtiff
- libtiff
- Memory corruption
Not analysed yet 17 May 2023
CVE-2023-1916 CVE record

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 10 Apr 2023
CVE-2022-4645 CVE record

CVSS 6.8 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 3 Mar 2023
CVE-2023-0804 CVE record

CVSS 6.8 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0803 CVE record

CVSS 6.8 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0802 CVE record

CVSS 6.8 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0801 CVE record

CVSS 6.8 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0800 CVE record

CVSS 6.8 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0799 CVE record

CVSS 6.8 Medium

Use after free in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0798 CVE record

CVSS 6.8 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0797 CVE record

CVSS 6.8 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0796 CVE record

CVSS 6.8 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2023-0795 CVE record

CVSS 6.8 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 13 Feb 2023
CVE-2022-3970 CVE record

CVSS 6.3 Medium

LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
- LibTIFF
- CWE-189
Not analysed yet 13 Nov 2022
CVE-2022-3627 CVE record

CVSS 5.5 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-3626 CVE record

CVSS 5.5 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-3599 CVE record

CVSS 5.5 Medium

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-3598 CVE record

CVSS 5.5 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-3597 CVE record

CVSS 5.5 Medium

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-3570 CVE record

CVSS 7.7 High

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 21 Oct 2022
CVE-2022-2521 CVE record

Release of invalid pointer in libtiff
- libtiff
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-2520 CVE record

Incorrect buffer size calculation in libtiff
- libtiff
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-2519 CVE record

Double free in libtiff
- libtiff
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-1355 CVE record

Stack-based buffer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-1354 CVE record

Out-of-bounds read in libtiff
- libtiff
- Memory corruption
Not analysed yet 31 Aug 2022
CVE-2022-2953 CVE record

CVSS 5.5 Medium

libtiff: LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905…
- libtiff
Not analysed yet 29 Aug 2022
CVE-2022-2869 CVE record

Integer underflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 17 Aug 2022
CVE-2022-2868 CVE record

Improper input validation in libtiff
- libtiff
- CWE-20
Not analysed yet 17 Aug 2022
CVE-2022-2867 CVE record

Integer underflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 17 Aug 2022
CVE-2022-2058 CVE record

CVSS 5.5 Medium

libtiff: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a…
- libtiff
Not analysed yet 30 Jun 2022
CVE-2022-2057 CVE record

CVSS 5.5 Medium

libtiff: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a…
- libtiff
Not analysed yet 30 Jun 2022
CVE-2022-2056 CVE record

CVSS 5.5 Medium

libtiff: Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a…
- libtiff
Not analysed yet 30 Jun 2022
CVE-2022-1623 CVE record

CVSS 5.5 Medium

libtiff: LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624…
- libtiff
Not analysed yet 11 May 2022
CVE-2022-1622 CVE record

CVSS 5.5 Medium

libtiff: LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619…
- libtiff
Not analysed yet 11 May 2022
CVE-2022-1210 CVE record

CVSS 4.3 Medium

LibTIFF tiff2ps resource consumption
- LibTIFF
- Denial of service
Not analysed yet 3 Apr 2022
CVE-2022-1056 CVE record

CVSS 5.5 Medium

libtiff: Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a…
- libtiff
Not analysed yet 28 Mar 2022
CVE-2022-0924 CVE record

CVSS 5.5 Medium

libtiff: Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a…
- libtiff
Not analysed yet 11 Mar 2022
CVE-2022-0909 CVE record

CVSS 5.5 Medium

libtiff: Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a…
- libtiff
Not analysed yet 11 Mar 2022
CVE-2022-0907 CVE record

CVSS 5.5 Medium

libtiff: Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows…
- libtiff
Not analysed yet 11 Mar 2022
CVE-2022-0891 CVE record

CVSS 6.1 Medium

libtiff: A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library…
- libtiff
Not analysed yet 9 Mar 2022
CVE-2022-0865 CVE record

CVSS 5.5 Medium

libtiff: Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a…
- libtiff
Not analysed yet 7 Mar 2022
CVE-2022-0562 CVE record

CVSS 5.5 Medium

libtiff: Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory()…
- libtiff
Not analysed yet 11 Feb 2022
CVE-2022-0561 CVE record

CVSS 5.5 Medium

libtiff: Null source pointer passed as an argument to memcpy() function within…
- libtiff
Not analysed yet 11 Feb 2022
CVE-2020-35524 CVE record

Out-of-bounds write in libtiff
- libtiff
- Memory corruption
Not analysed yet 9 Mar 2021
CVE-2020-35523 CVE record

Integer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 9 Mar 2021
CVE-2020-35522 CVE record

Buffer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 9 Mar 2021
CVE-2020-35521 CVE record

Buffer overflow in libtiff
- libtiff
- Memory corruption
Not analysed yet 9 Mar 2021