Approved changes feed: RSS · Atom
cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Libtiff (ac2ea08f-0316-58fe-bd1f-047045079efa) |
|---|---|
| Product | Libtiff (c4c7a4e3-eeb7-5258-99a3-c871d3eaf5a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libtiff5 |
purl2cpe | 2026-06-01 10:13:23.698988 |
pkg:deb/ubuntu/libtiff5 |
purl2cpe | 2026-06-01 10:13:23.698989 |
pkg:github/vadz/libtiff |
purl2cpe | 2026-06-01 10:13:23.698990 |
pkg:gitlab/libtiff/libtiff |
purl2cpe | 2026-06-01 10:13:23.698992 |
pkg:rpm/fedora/libtiff |
purl2cpe | 2026-06-01 10:13:23.698993 |
pkg:rpm/opensuse/libtiff |
purl2cpe | 2026-06-01 10:13:23.698995 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4775 |
vulnerable | 2026-06-08 08:07:02.314336 |
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
HIGH (7.8)
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
Published: 2026-03-24T14:42:47.529Z
Updated: 2026-11-04T22:41:45.604Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6277 |
vulnerable | 2026-06-08 06:19:46.835673 |
Libtiff: out-of-memory in tiffopen via a craft file
MEDIUM (6.5)
An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
Published: 2023-11-24T18:20:16.683Z
Updated: 2026-11-05T11:36:55.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6228 |
vulnerable | 2026-06-08 06:19:46.596948 |
Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c
LOW (3.3)
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
Published: 2023-12-18T13:43:08.775Z
Updated: 2026-11-06T13:40:17.630Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52356 |
vulnerable | 2026-06-08 06:17:54.945689 |
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
HIGH (7.5)
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
Published: 2024-01-25T20:03:40.971Z
Updated: 2026-11-07T06:16:47.321Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7313 |
vulnerable | 2026-06-08 05:07:00.404592 |
Details available
LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.
Published: 2017-03-17T14:00:00.000Z
Updated: 2025-08-26T15:15:13.039Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.