Approved changes feed: RSS · Atom

cpe:2.3:a:libtiff:libtiff:4.0.6:*:*:*:*:*:*:*

part: a version: 4.0.6 update: *

VendorLibtiff (ac2ea08f-0316-58fe-bd1f-047045079efa)
ProductLibtiff (c4c7a4e3-eeb7-5258-99a3-c871d3eaf5a9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libtiff5 purl2cpe 2026-06-01 10:13:23.699539
pkg:deb/ubuntu/libtiff5 purl2cpe 2026-06-01 10:13:23.699540
pkg:github/vadz/libtiff purl2cpe 2026-06-01 10:13:23.699542
pkg:gitlab/libtiff/libtiff purl2cpe 2026-06-01 10:13:23.699543
pkg:rpm/fedora/libtiff purl2cpe 2026-06-01 10:13:23.699544
pkg:rpm/opensuse/libtiff purl2cpe 2026-06-01 10:13:23.699546

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9540 vulnerable 2026-06-08 05:08:24.015844 Details available
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."
Published: 2016-11-22T19:00:00.000Z
Updated: 2024-08-06T02:50:38.381Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9539 vulnerable 2026-06-08 05:08:24.015529 Details available
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.
Published: 2016-11-22T19:00:00.000Z
Updated: 2024-08-06T02:50:38.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9538 vulnerable 2026-06-08 05:08:24.015232 Details available
tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.
Published: 2016-11-22T19:00:00.000Z
Updated: 2024-08-06T02:50:38.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9537 vulnerable 2026-06-08 05:08:24.014914 Details available
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.
Published: 2016-11-22T19:00:00.000Z
Updated: 2024-08-06T02:50:38.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9536 vulnerable 2026-06-08 05:08:24.014588 Details available
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."
Published: 2016-11-22T19:00:00.000Z
Updated: 2024-08-06T02:50:38.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9535 vulnerable 2026-06-08 05:08:24.014269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9534 vulnerable 2026-06-08 05:08:24.013912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9533 vulnerable 2026-06-08 05:08:24.013573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9448 vulnerable 2026-06-08 05:08:23.851265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9297 vulnerable 2026-06-08 05:08:23.213144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9273 vulnerable 2026-06-08 05:08:23.198342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8331 vulnerable 2026-06-08 05:08:14.117179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5652 vulnerable 2026-06-08 05:07:57.398812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5317 vulnerable 2026-06-08 05:07:56.718148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3622 vulnerable 2026-06-08 05:07:45.694975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3619 vulnerable 2026-06-08 05:07:45.692526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3186 vulnerable 2026-06-08 05:07:44.969690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10371 vulnerable 2026-06-08 05:07:17.818592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8683 vulnerable 2026-06-08 05:07:04.717949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8665 vulnerable 2026-06-08 05:07:04.649163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7554 vulnerable 2026-06-08 05:07:01.365363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.