Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | Jul 30, 2024 | Dec 23, 2004 |
| Freebsd | — | Upgrade pdflib-perlUpgrade paraviewUpgrade fractoramaUpgrade linux-tiffUpgrade ja-libimgUpgrade ivtoolsUpgrade gdalUpgrade tiffUpgrade ivUpgrade ja-ivUpgrade pdflib | Dec 10, 2025 | Oct 13, 2004 |
| Gentoo Linux | — | Upgrade media-gfx/xv.Upgrade media-libs/pdflib.Upgrade kde-base/kdegraphics.Upgrade media-libs/tiff. | Oct 30, 2017 | Dec 23, 2004 |
| Suse | — | Upgrade libtiff-32bitUpgrade libtiff-x86Upgrade libtiffUpgrade libtiff-64bitUpgrade kdegraphics3-fax | Feb 17, 2015 | Dec 23, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub