Libtiff

Libtiff

265 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2016-3625

  • EPSS 1.76%
  • Veröffentlicht 03.10.2016 16:09:07
  • Zuletzt bearbeitet 06.05.2026 22:30:45

tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

7.5

CVE-2016-3624

Exploit
  • EPSS 4.06%
  • Veröffentlicht 03.10.2016 16:09:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The cvtClump function in the rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) by setting the "-v" option to -1.

7.5

CVE-2016-3623

Exploit
  • EPSS 5.54%
  • Veröffentlicht 03.10.2016 16:09:05
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.

6.5

CVE-2016-3622

Exploit
  • EPSS 3.89%
  • Veröffentlicht 03.10.2016 16:09:04
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

8.8

CVE-2016-3621

  • EPSS 2.1%
  • Veröffentlicht 03.10.2016 16:09:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The LZWEncode function in tif_lzw.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c lzw" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

7.5

CVE-2016-3620

Exploit
  • EPSS 3.21%
  • Veröffentlicht 03.10.2016 16:09:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

6.5

CVE-2016-3619

Exploit
  • EPSS 2.3%
  • Veröffentlicht 03.10.2016 16:09:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The DumpModeEncode function in tif_dumpmode.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c none" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.

7.8

CVE-2016-3991

  • EPSS 3.85%
  • Veröffentlicht 21.09.2016 18:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image with zero tiles.

7.8

CVE-2016-3990

  • EPSS 3.89%
  • Veröffentlicht 21.09.2016 18:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image to tiffcp.

7.8

CVE-2016-3945

  • EPSS 3.38%
  • Veröffentlicht 21.09.2016 18:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a ...