[CVE-2026-18495 ] Published: Aug 11, 2026, 12:55:57 PM UTC
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a s
Medium(6.6) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto · Corretta: 4.7.1-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto · Corretta: 4.7.1-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2026-52490 ] Published: Aug 11, 2026, 12:55:57 PM UTC
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c
Critical(9.8) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto · Corretta: 4.7.2-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto · Corretta: 4.7.2-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2026-52491 ] Published: Aug 11, 2026, 12:55:57 PM UTC
An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component
High(8.4) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto · Corretta: 4.7.2-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto · Corretta: 4.7.2-1
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2026-52492 ] Published: Aug 11, 2026, 12:55:57 PM UTC
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow duri
High(7.8) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2026-36849 ] Published: Jun 16, 2026, 10:00:00 PM UTC
tiff: CVE-2026-36849
Medium(6.5) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto · Corretta: 4.7.1-3
Version impact unknown
dsa · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto · Corretta: 4.7.1-3
Version impact unknown
dsa · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2026-12912 ] Published: Apr 16, 2026, 12:00:00 AM UTC
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images w
High(7.3) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto
Version impact unknown
nvd · tiff · debian · bookworm
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto
Version impact unknown
nvd · tiff · debian · bookworm
[CVE-2026-4775 ] Published: Mar 24, 2026, 2:33:35 PM UTC
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. Th
High(8.6) Sconosciuto Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Sconosciuto · Corretta: 4.5.0-6+deb12u4, 4.7.0-3+deb13u2, 4.7.1-2
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
4.7.0-3+deb13u3 · arm64 · trixie-security
Sconosciuto · Corretta: 4.5.0-6+deb12u4, 4.7.0-3+deb13u2, 4.7.1-2
Version impact unknown
nvd · tiff · debian · bookworm; pypi · tiff · debian · 12; pypi · tiff · debian · 13; pypi · tiff · debian · 14
[CVE-2025-9900 ] Published: Sep 22, 2025, 2:29:35 PM UTC
QT WebEngine vulnerability
High(8.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 11:40:56 AM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
[CVE-2025-9165 ] Published: Aug 19, 2025, 8:02:13 PM UTC
LibTIFF vulnerabilities
Low(3.3) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:14:54 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
[CVE-2025-8961 ] Published: Aug 14, 2025, 12:02:08 PM UTC
LibTIFF vulnerabilities
Low(3.3) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:31:08 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
usn · tiff · debian · 13
[CVE-2025-8851 ] Published: Aug 11, 2025, 1:32:08 PM UTC
LibTIFF vulnerabilities
Medium(5.3) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:31:55 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.7.0-1
usn · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.7.0-1
usn · tiff · debian · 13
[CVE-2025-8534 ] Published: Aug 4, 2025, 10:00:00 PM UTC
LibTIFF vulnerabilities
Low(2.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:31:58 PM UTC
Dettagli (2) [CVE-2025-8177 ] Published: Jul 26, 2025, 4:02:07 AM UTC
LibTIFF vulnerabilities
High(7.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:36:02 PM UTC
Dettagli (2) [CVE-2025-8176 ] Published: Jul 26, 2025, 3:32:08 AM UTC
LibTIFF vulnerabilities
High(7.8) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 12:36:02 PM UTC
Dettagli (2) [CVE-2025-61143 ] Published: Jan 1, 2025, 12:00:00 AM UTC
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
Medium(5.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:49 AM UTC
Dettagli (2) [CVE-2025-61144 ] Published: Jan 1, 2025, 12:00:00 AM UTC
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
Medium(6.6) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:49 AM UTC
Dettagli (2) [CVE-2025-61145 ] Published: Jan 1, 2025, 12:00:00 AM UTC
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
Medium(5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 27, 2026, 9:31:49 AM UTC
Dettagli (2) [CVE-2024-7006 ] Published: Jul 19, 2024, 12:00:00 AM UTC
LibTIFF vulnerability
High(7.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 4:37:25 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.5.1+git230720-5
usn · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.5.1+git230720-5
usn · tiff · debian · 13
[CVE-2024-13978 ] Published: Jan 1, 2024, 12:00:00 AM UTC
tiff: CVE-2024-13978
Medium(4.7) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 5:39:31 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
dsa · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.7.0-3+deb13u1
dsa · tiff · debian · 13
[CVE-2023-52355 ] Published: Nov 3, 2023, 12:00:00 AM UTC
tiff: CVE-2023-52355
High(7.5) Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 28, 2026, 5:43:33 PM UTC
Dettagli (2) 4.7.0-3+deb13u3 · amd64 · trixie-security
Corretta · Corretta: 4.5.1+git230720-4
dsa · tiff · debian · 13
4.7.0-3+deb13u3 · arm64 · trixie-security
Corretta · Corretta: 4.5.1+git230720-4
dsa · tiff · debian · 13