Vulnerabilities > Libtiff

DATE CVE VULNERABILITY TITLE RISK
2021-03-09 CVE-2020-35524 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool.
6.8
2021-03-09 CVE-2020-35523 Integer Overflow OR Wraparound vulnerability in multiple products
An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file.
6.8
2021-03-09 CVE-2020-35522 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Libtiff
In LibTIFF, there is a memory malloc failure in tif_pixarlog.c.
network
libtiff CWE-119
4.3
2021-03-09 CVE-2020-35521 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
A flaw was found in libtiff.
4.3
2020-02-12 CVE-2014-8128 Out-Of-Bounds Write vulnerability in Libtiff
LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image.
4.3
2019-10-14 CVE-2019-17546 Integer Overflow OR Wraparound vulnerability in multiple products
tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.
6.8
2019-08-14 CVE-2019-14973 Integer Overflow OR Wraparound vulnerability in Libtiff
_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards.
network
libtiff CWE-190
4.3
2019-03-21 CVE-2017-16232 Missing Release of Resource After Effective Lifetime vulnerability in multiple products
** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c.
network
low complexity
libtiff opensuse suse CWE-772
5.0
2019-02-09 CVE-2019-7663 An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. 4.3
2019-01-11 CVE-2019-6128 Memory Leak vulnerability in multiple products
The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.
6.8