Most severe vulnerabilities for "libtiff"

Where

Sort:

libtiffBuffer Overflow

Risk 86

Severity

9.8

Buffer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Last updated 23 March 2026

1 / 2

Source: Ubuntu

First published (updated )

CVE-2025-61144

Remotesensing LibtiffBuffer Overflow

Risk 82

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

A stack-based buffer overflow was found in the way tiff2pdf, a TIFF image to a PDF document conversion tool, of libtiff, a library of functions for manipulating TIFF (Tagged Image File Format) image format files, performed write of TIFF image content into particular PDF document file, when malformed image-length and resolution values are used in the TIFF file. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash.

Acknowledgements:

Red Hat would like to thank Emmanuel Bouillon (NCI Agency) for reporting this issue.

1 / 2

Source: Red Hat

First published (updated )

CVE-2013-1961

Remotesensing LibtiffBuffer Overflow

Risk 82

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

A heap-based buffer overflow flaw was found in the way tiff2pdf, a TIFF image to a PDF document conversion tool, of libtiff, a library of functions for manipulating TIFF (Tagged Image File Format) image format files, performed write of TIFF image content into particular PDF document file, in the tpprocessjpegstrip() function. A remote attacker could provide a specially-crafted TIFF image format file, that when processed by tiff2pdf would lead to tiff2pdf executable crash or, potentially, arbitrary code execution with the privileges of the user running the tiff2pdf binary.

Acknowledgements:

Red Hat would like to thank Emmanuel Bouillon (NCI Agency) for reporting this issue.

1 / 2

Source: Red Hat

First published (updated )

CVE-2013-1960

IBM Cognos AnalyticsBuffer Overflow

Risk 45

Severity

7.5

Buffer Overflow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the "invertImage()" function in the component "tiffcrop".

1 / 2

First published (updated )

CVE-2020-19131

libtiffLibtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

Risk 64

Severity

7.3

Buffer Overflow

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-based buffer overflow. This could potentially result in arbitrary code execution or a denial of service (DoS).

1 / 3

Source: NVD

First published (updated )

CVE-2026-12912