The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade tiff | Oct 1, 2024 | Jan 20, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 20, 2017 |
| Debian | — | Upgrade tiffUpgrade tiff3 | Jan 14, 2017 | Jan 13, 2017 |
| Gentoo Linux | — | Upgrade media-libs/tiff. | Oct 30, 2017 | Jan 20, 2017 |
| Oracle Solaris | — | Upgrade image/library/libtiff to version 4.0.8-0.175.3.27.0.1.0 on Solaris 11.3 | Dec 19, 2017 | Jan 20, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 15, 2016 |
| Suse | — | Upgrade libtiff3-32bitUpgrade libtiff5-32bitUpgrade libtiff-develUpgrade tiffUpgrade libtiff3Upgrade libtiff-devel-32bitUpgrade libtiff3-x86Upgrade libtiff5 | Jan 20, 2017 | Jan 20, 2017 |
| Ubuntu | — | Upgrade libtiff-toolsUpgrade libtiff5 | Feb 28, 2017 | Jan 20, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub