Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 14, 2005 |
| Freebsd | — | Upgrade gdalUpgrade linux-tiffUpgrade pdflibUpgrade tiffUpgrade ja-ivUpgrade ivtoolsUpgrade fractoramaUpgrade paraviewUpgrade ivUpgrade pdflib-perlUpgrade ja-libimg | Dec 10, 2025 | Jul 30, 2005 |
| Gentoo Linux | — | Upgrade media-libs/tiff. | Oct 30, 2017 | May 14, 2005 |
| Suse | — | Upgrade libtiff-64bitUpgrade libtiffUpgrade libtiff-32bitUpgrade libtiff-x86 | Dec 12, 2013 | May 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub