CVE catalog

CVE-2025-8851

LibTIFF vulnerabilities

Severity: Medium · CVSS 5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Published: Aug 11, 2025, 1:32:08 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.19% · Oct 25, 2026

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	tiff	sid	`4.7.2-1`	fixed
Debian	tiff	forky	`4.7.2-1`	fixed
Debian	tiff	trixie	`4.7.0-3+deb13u3`	fixed
Debian	tiff	trixie-security	`4.7.0-3+deb13u3`	fixed
Debian	tiff	bookworm	`4.5.0-6+deb12u4`	vulnerable
Debian	tiff	bookworm-security	`4.5.0-6+deb12u4`	vulnerable
Ubuntu	tiff	noble	Not reported	vulnerable
Ubuntu	tiff	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff-dev	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff-doc	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff-opengl	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff-tools	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff5-dev	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiff6	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Ubuntu	libtiffxx6	noble	`4.5.1+git230720-4ubuntu2.3`	fixed
Opensuse	tiff	tumbleweed	`4.7.1-3.1`	fixed
Opensuse	tkimg	tumbleweed	`2.1.0-1.1`	fixed
Suse	tiff	linux enterprise server ltss extended security 12 sp5	`4.0.9-44.106.1`	fixed
Suse	tiff	linux enterprise module for basesystem 15 sp6	`4.7.1-150600.3.23.1`	fixed
Suse	tiff	linux enterprise module for basesystem 15 sp7	`4.7.1-150600.3.23.1`	fixed
Suse	tiff	linux enterprise module for package hub 15 sp6	`4.7.1-150600.3.23.1`	fixed
Suse	tiff	linux enterprise module for package hub 15 sp7	`4.7.1-150600.3.23.1`	fixed
Opensuse	tiff	leap 15.6	`4.7.1-150600.3.23.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	tiff	source	sid	`4.7.0-1`	unimportant	Not reported	Not reported
Debian	tiff	source	forky	`4.7.0-1`	unimportant	Not reported	Not reported
Debian	tiff	source	trixie	`4.7.0-1`	unimportant	Not reported	Not reported
Debian	tiff	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Ubuntu	tiff	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff-dev	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff-doc	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff-opengl	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff-tools	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff5-dev	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiff6	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libtiffxx6	deb	noble	`4.5.1+git230720-4ubuntu2.3`	Not reported	Not reported	Not reported
Opensuse	tiff	rpm	tumbleweed	`4.7.1-3.1`	Not reported	OPENSUSE-SU-2025:15682-1	Not reported
Opensuse	tkimg	rpm	tumbleweed	`2.1.0-1.1`	Not reported	OPENSUSE-SU-2025:15556-1	Not reported
Suse	tiff	rpm	linux enterprise server ltss extended security 12 sp5	`4.0.9-44.106.1`	Not reported	SUSE-SU-2025:3989-1	Not reported
Suse	tiff	rpm	linux enterprise module for basesystem 15 sp6	`4.7.1-150600.3.23.1`	Not reported	SUSE-SU-2025:3957-1	Not reported
Suse	tiff	rpm	linux enterprise module for basesystem 15 sp7	`4.7.1-150600.3.23.1`	Not reported	SUSE-SU-2025:3957-1	Not reported
Suse	tiff	rpm	linux enterprise module for package hub 15 sp6	`4.7.1-150600.3.23.1`	Not reported	SUSE-SU-2025:3957-1	Not reported
Suse	tiff	rpm	linux enterprise module for package hub 15 sp7	`4.7.1-150600.3.23.1`	Not reported	SUSE-SU-2025:3957-1	Not reported
Opensuse	tiff	rpm	leap 15.6	`4.7.1-150600.3.23.1`	Not reported	SUSE-SU-2025:3957-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libtiff5-dev]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff6]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-dev]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-doc]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · all · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · all · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-opengl]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiff-tools]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
[libtiffxx6]Affected
Source package: [tiff]
Details (4)
- 4.5.0-6+deb12u4 · amd64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · amd64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12
- 4.5.0-6+deb12u4 · arm64 · bookworm-security
  Affected
  usn · tiff · debian · bookworm; usn · tiff · debian · 12

[openSUSE Tumbleweed]

[libtiff6]Unknown
Source package: [tiff]
Details (1)
- 4.7.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 4.7.1-3.1
  Version impact unknown
  usn · tiff · opensuse · tumbleweed
[libtiff6-32bit]Unknown
Source package: [tiff]
Details (1)
- 4.7.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 4.7.1-3.1
  Version impact unknown
  usn · tiff · opensuse · tumbleweed
[libtiff-devel]Unknown
Source package: [tiff]
Details (1)
- 4.7.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 4.7.1-3.1
  Version impact unknown
  usn · tiff · opensuse · tumbleweed
[libtiff-devel-32bit]Unknown
Source package: [tiff]
Details (1)
- 4.7.2-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 4.7.1-3.1
  Version impact unknown
  usn · tiff · opensuse · tumbleweed
[tkimg-devel]Unknown
Source package: [tkimg]
Details (1)
- 2.1.0-1.5 · x86_64 · tumbleweed
  Unknown · Fixed: 2.1.0-1.1
  Version impact unknown
  usn · tkimg · opensuse · tumbleweed
[tiff]Fixed
Source package: [tiff]
Details (1)
- 4.7.2-1.2 · x86_64 · tumbleweed
  Fixed · Fixed: 4.7.1-3.1
  usn · tiff · opensuse · tumbleweed

[Debian 13 (Trixie)]

[libtiff5-dev]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiff6]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiff-dev]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiff-doc]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · all · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · all · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · all · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · all · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiff-opengl]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiff-tools]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
[libtiffxx6]Fixed
Source package: [tiff]
Details (4)
- 4.7.0-3+deb13u2 · amd64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u2 · arm64 · trixie
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13
- 4.7.0-3+deb13u3 · arm64 · trixie-security
  Fixed · Fixed: 4.7.0-1
  usn · tiff · debian · 13

Next results

Observed: Oct 27, 2026, 12:31:55 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]