Libtiff

Libtiff

258 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2016-3991

  • EPSS 0.38%
  • Published 21.09.2016 18:59:03
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.

7.8

CVE-2016-3990

  • EPSS 0.44%
  • Published 21.09.2016 18:59:02
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

7.8

CVE-2016-3945

  • EPSS 0.12%
  • Published 21.09.2016 18:59:01
  • Last modified 12.04.2025 10:46:40

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a ...

7.8

CVE-2016-3632

  • EPSS 0.18%
  • Published 21.09.2016 18:59:00
  • Last modified 12.04.2025 10:46:40

The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image.

6.2

CVE-2016-3186

  • EPSS 0.99%
  • Published 19.04.2016 14:59:01
  • Last modified 12.04.2025 10:46:40

Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted GIF file.

6.5

CVE-2015-8784

  • EPSS 1.52%
  • Published 13.04.2016 17:59:06
  • Last modified 12.04.2025 10:46:40

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif.

5.5

CVE-2015-8683

  • EPSS 0.21%
  • Published 13.04.2016 17:59:05
  • Last modified 12.04.2025 10:46:40

The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image.

5.5

CVE-2015-8665

  • EPSS 0.21%
  • Published 13.04.2016 17:59:04
  • Last modified 12.04.2025 10:46:40

tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image.

6.5

CVE-2015-1547

Exploit
  • EPSS 4.43%
  • Published 13.04.2016 17:59:01
  • Last modified 12.04.2025 10:46:40

The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff5.tif.

6.5

CVE-2015-8783

  • EPSS 0.66%
  • Published 01.02.2016 21:59:03
  • Last modified 12.04.2025 10:46:40

tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.