l
libtiff
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 359 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 16, 2004 to present
359
Total CVEs
113
Critical+High
0
Exploited
29
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
29
Critical/High
Risk Level
54/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
16High
97Medium
216Low
25Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
12Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
129
2
Integer Overflow
39
3
Null Pointer Dereference
25
4
Input Validation
24
5
Divide by Zero
16
Most Affected Products
1. LibTIFF libtiff1257
2. debian/tiff156
3. Debian Debian Linux127
4. IBM Cognos Analytics114
5. Canonical Ubuntu Linux81
Recent Vulnerabilities
See more →CVE-2026-18495
CVSS 6.1medium
Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough
Sep 10, 2026🔧 No Patch
CVE-2026-52492
CVSS 7.8high
Aug 24, 2026🔧 No Patch
CVE-2026-52490
CVSS 9.8critical
Aug 24, 2026🔧 No Patch
REDHAT-BUG-2492871
CVSS 7.0high
Jun 25, 2026🔧 No Patch
CVE-2026-36849
unknown
[CVE-2026-36849] libtiff: Denial of Service via large SamplesPerPixel tag
Jun 17, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/952
unknown
[CVE-2026-36849] libtiff: Denial of Service via large SamplesPerPixel tag
Jun 17, 2026🔧 No Patch
CVE-2026-4775
CVSS 7.8EPSS 0%high
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Mar 24, 2026
REDHAT-BUG-2450768
CVSS 7.0high
Mar 24, 2026🔧 No Patch
CVE-2025-61144
CVSS 9.8critical
Feb 23, 2026
CVE-2025-61143
CVSS 5.5medium
Feb 23, 2026
Monitor libtiff in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.