Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade tiff | Jul 30, 2024 | May 14, 2005 |
| Freebsd | — | Upgrade fractoramaUpgrade gdalUpgrade ivUpgrade tiffUpgrade ja-ivUpgrade ivtoolsUpgrade pdflibUpgrade linux-tiffUpgrade paraviewUpgrade ja-libimgUpgrade pdflib-perl | Dec 10, 2025 | Jul 30, 2005 |
| Gentoo Linux | — | Upgrade media-libs/tiff. | Oct 30, 2017 | May 14, 2005 |
| Suse | — | Upgrade libtiff-x86Upgrade libtiff-64bitUpgrade libtiff-32bitUpgrade libtiff | Dec 12, 2013 | May 14, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub