The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended to apply a patch to fix this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtiff-toolsUpgrade mingw32-libtiff-staticUpgrade mingw32-libtiffUpgrade libtiff-develUpgrade mingw64-libtiffUpgrade mingw64-libtiff-staticUpgrade libtiff | Oct 29, 2025 | Oct 27, 2025 |
| Amazon Linux Ami 2 | — | Upgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-staticUpgrade libtiff-debuginfoUpgrade libtiff | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade libtiff-toolsUpgrade libtiff-staticUpgrade libtiff-debuginfoUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff | Sep 9, 2025 | Jul 26, 2025 |
| Debian | — | No solution exists | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade libtiff-develUpgrade mingw32-libtiffUpgrade mingw64-libtiff-staticUpgrade mingw32-libtiff-staticUpgrade mingw64-libtiffUpgrade libtiff-toolsUpgrade libtiff-staticUpgrade libtiff | Oct 29, 2025 | Jul 26, 2025 |
| Redhat_linux | — | Upgrade libtiff-tools-debuginfoUpgrade mingw32-libtiff-staticUpgrade mingw64-libtiff-debuginfoUpgrade libtiff-toolsUpgrade mingw32-libtiffUpgrade libtiff-debugsourceUpgrade libtiff-develUpgrade libtiff-debuginfoUpgrade libtiff-staticUpgrade mingw32-libtiff-debuginfoUpgrade libtiffUpgrade mingw64-libtiff-staticUpgrade mingw64-libtiff | Jul 31, 2025 | Jul 26, 2025 |
| Rocky_linux | — | Upgrade libtiff-debuginfoUpgrade libtiff-toolsUpgrade libtiff-develUpgrade libtiff-debugsourceUpgrade libtiff-tools-debuginfoUpgrade libtiff | Feb 5, 2026 | Nov 11, 2025 |
| Suse | — | Upgrade tiffUpgrade libtiff-devel-32bitUpgrade libtiff5Upgrade libtiff6Upgrade libtiff5-32bitUpgrade libtiff-develUpgrade libtiff6-32bit | Dec 5, 2025 | Oct 29, 2025 |
| Ubuntu | — | Upgrade libtiff-tools (Ubuntu Pro)Upgrade libtiff6Upgrade libtiff5Upgrade libtiff-toolsUpgrade libtiff5 (Ubuntu Pro) | Aug 4, 2025 | Jul 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 16, 2025 | Jul 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub