CVE catalog

CVE-2025-8534

LibTIFF vulnerabilities

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply a patch to fix this issue. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."

Severity: Low · CVSS 2.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
Published: Aug 4, 2025, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.21% · Oct 27, 2026

Projects and upstream resources

[tiff][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "tiff",
      "status": "fixed",
      "release": "sid",
      "version": "4.7.2-1"
    },
    {
      "name": "tiff",
      "status": "fixed",
      "release": "forky",
      "version": "4.7.2-1"
    },
    {
      "name": "tiff",
      "status": "vulnerable",
      "release": "trixie",
      "version": "4.7.0-3+deb13u3"
    },
    {
      "name": "tiff",
      "status": "vulnerable",
      "release": "trixie-security",
      "version": "4.7.0-3+deb13u3"
    },
    {
      "name": "tiff",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "4.5.0-6+deb12u4"
    },
    {
      "name": "tiff",
      "status": "vulnerable",
      "release": "bookworm-security",
      "version": "4.5.0-6+deb12u4"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "tiff",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "unimportant",
      "fixed_version": "4.7.1-1"
    },
    {
      "bug": null,
      "name": "tiff",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "unimportant",
      "fixed_version": "4.7.1-1"
    },
    {
      "bug": null,
      "name": "tiff",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "unimportant",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "tiff",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "unimportant",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "tiff",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "tiff",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff-doc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff-opengl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff-tools",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff5-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiff6",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "libtiffxx6",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "4.5.1+git230720-4ubuntu2.3"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-44.94.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-44.94.1",
      "provider_record_id": "SUSE-SU-2025:03346-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    },
    {
      "name": "tiff",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.0.9-150000.45.55.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "4.0.9-150000.45.55.1",
      "provider_record_id": "SUSE-SU-2025:03345-1"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libtiff5-dev]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff6]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-dev]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-doc]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · all · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-opengl]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-tools]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiffxx6]Unknown
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12

[Debian 13 (Trixie)]

[libtiff5-dev]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiff6]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiff-dev]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiff-doc]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · all · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · all · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · all · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · all · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiff-opengl]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiff-tools]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13
[libtiffxx6]Unknown
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Affected
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Affected
  usn · tiff · debian · 13

Observed: Oct 27, 2026, 12:31:58 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]