libtiff 4.0.9
Approved changes feed: RSS · Atom
cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*part: a version: 4.0.9 update: *
| Vendor | Libtiff (ac2ea08f-0316-58fe-bd1f-047045079efa) |
|---|---|
| Product | Libtiff (c4c7a4e3-eeb7-5258-99a3-c871d3eaf5a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libtiff5 |
purl2cpe | 2026-06-01 10:13:23.699563 |
pkg:deb/ubuntu/libtiff5 |
purl2cpe | 2026-06-01 10:13:23.699565 |
pkg:github/vadz/libtiff |
purl2cpe | 2026-06-01 10:13:23.699566 |
pkg:gitlab/libtiff/libtiff |
purl2cpe | 2026-06-01 10:13:23.699567 |
pkg:rpm/fedora/libtiff |
purl2cpe | 2026-06-01 10:13:23.699569 |
pkg:rpm/opensuse/libtiff |
purl2cpe | 2026-06-01 10:13:23.699570 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-8905 |
vulnerable | 2026-06-08 05:12:06.681273 |
Details available
In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.
Published: 2018-03-22T04:00:00.000Z
Updated: 2024-08-05T07:10:46.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7456 |
vulnerable | 2026-06-08 05:12:03.711675 |
Details available
A NULL Pointer Dereference occurs in the function TIFFPrintDirectory in tif_print.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013. (This affects an earlier part of the TIFFPrintDirectory function that was not addressed by the CVE-2017-18013 patch.)
Published: 2018-02-24T06:00:00.000Z
Updated: 2024-08-05T06:24:12.048Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5784 |
vulnerable | 2026-06-08 05:11:51.937881 |
Details available
In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file. This occurs because the declared number of directory entries is not validated against the actual number of directory entries.
Published: 2018-01-19T08:00:00.000Z
Updated: 2024-08-05T05:47:54.574Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19210 |
vulnerable | 2026-06-08 05:11:15.470962 |
Details available
In LibTIFF 4.0.9, there is a NULL pointer dereference in the TIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a denial of service attack, as demonstrated by tiffset.
Published: 2018-11-12T19:00:00.000Z
Updated: 2024-08-05T11:30:04.380Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18661 |
vulnerable | 2026-06-08 05:11:14.444810 |
Details available
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c.
Published: 2018-10-26T13:00:00.000Z
Updated: 2024-08-05T11:15:59.945Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18557 |
vulnerable | 2026-06-08 05:11:14.238312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17795 |
vulnerable | 2026-06-08 05:11:06.727462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17101 |
vulnerable | 2026-06-08 05:11:05.946587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17100 |
vulnerable | 2026-06-08 05:11:05.945579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17000 |
vulnerable | 2026-06-08 05:11:05.834033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16335 |
vulnerable | 2026-06-08 05:11:04.722534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15209 |
vulnerable | 2026-06-08 05:10:53.899724 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12900 |
vulnerable | 2026-06-08 05:10:42.098495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10126 |
vulnerable | 2026-06-08 05:10:26.373079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18013 |
vulnerable | 2026-06-08 05:09:10.166629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17942 |
vulnerable | 2026-06-08 05:09:10.111443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17095 |
vulnerable | 2026-06-08 05:09:07.890380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.