Vulnerabilities > Libtiff
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-03-09 | CVE-2020-35524 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. | 6.8 |
| 2021-03-09 | CVE-2020-35523 | Integer Overflow OR Wraparound vulnerability in multiple products An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. | 6.8 |
| 2021-03-09 | CVE-2020-35522 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Libtiff In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. | 4.3 |
| 2021-03-09 | CVE-2020-35521 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products A flaw was found in libtiff. | 4.3 |
| 2020-02-12 | CVE-2014-8128 | Out-Of-Bounds Write vulnerability in Libtiff LibTIFF prior to 4.0.4, as used in Apple iOS before 8.4 and OS X before 10.10.4 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image. | 4.3 |
| 2019-10-14 | CVE-2019-17546 | Integer Overflow OR Wraparound vulnerability in multiple products tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition. | 6.8 |
| 2019-08-14 | CVE-2019-14973 | Integer Overflow OR Wraparound vulnerability in Libtiff _TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. | 4.3 |
| 2019-03-21 | CVE-2017-16232 | Missing Release of Resource After Effective Lifetime vulnerability in multiple products ** DISPUTED ** LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. | 5.0 |
| 2019-02-09 | CVE-2019-7663 | An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. | 4.3 |
| 2019-01-11 | CVE-2019-6128 | Memory Leak vulnerability in multiple products The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb. | 6.8 |