CVE-2016-9536: Buffer Overflow
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2pprocessjpegstrip(). Reported as MSVR 35098, aka "t2pprocessjpegstrip heap-buffer-overflow."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9536?
CVE-2016-9536 has a high severity due to its potential for out-of-bounds write vulnerabilities that can lead to arbitrary code execution.
How do I fix CVE-2016-9536?
To fix CVE-2016-9536, update to the appropriate versions of the libtiff package, such as 4.1.0+git191117-2~deb10u4 or later.
Which software is affected by CVE-2016-9536?
CVE-2016-9536 affects libtiff version 4.0.6 and other versions prior to the patched releases.
What types of vulnerabilities are present in CVE-2016-9536?
CVE-2016-9536 contains out-of-bounds write vulnerabilities specifically in the t2p_process_jpeg_strip function.
Is CVE-2016-9536 a known issue in earlier versions?
Yes, CVE-2016-9536 is a known issue in libtiff 4.0.6, which has been addressed in subsequent releases.