A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file.
By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to an arbitrary memory location. This memory corruption can be exploited to cause a denial of service (application crash) or to achieve arbitrary code execution with the permissions of the user.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-compat-libtiff3alma-upgrade-libtiffalma-upgrade-libtiff-develalma-upgrade-libtiff-toolsalma-upgrade-mingw32-libtiffalma-upgrade-mingw32-libtiff-staticalma-upgrade-mingw64-libtiffalma-upgrade-mingw64-libtiff-static | Oct 14, 2025 | Oct 9, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-compat-libtiff3amazon-linux-ami-2-upgrade-compat-libtiff3-debuginfoamazon-linux-ami-2-upgrade-libtiffamazon-linux-ami-2-upgrade-libtiff-debuginfoamazon-linux-ami-2-upgrade-libtiff-develamazon-linux-ami-2-upgrade-libtiff-staticamazon-linux-ami-2-upgrade-libtiff-tools | May 20, 2026 | May 20, 2026 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libtiffamazon-linux-2023-upgrade-libtiff-debuginfoamazon-linux-2023-upgrade-libtiff-debugsourceamazon-linux-2023-upgrade-libtiff-develamazon-linux-2023-upgrade-libtiff-staticamazon-linux-2023-upgrade-libtiff-toolsamazon-linux-2023-upgrade-libtiff-tools-debuginfo | Oct 16, 2025 | Sep 22, 2025 | |
| Debian | debian-upgrade-tiff | Oct 1, 2025 | Oct 1, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-libtiff | Jan 15, 2026 | Jan 13, 2026 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libtiff | Dec 12, 2025 | Nov 11, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-libtiff | Nov 12, 2025 | Nov 11, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-libtiff | Dec 12, 2025 | Nov 11, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-compat-libtiff3oracle-linux-upgrade-libtifforacle-linux-upgrade-libtiff-develoracle-linux-upgrade-libtiff-staticoracle-linux-upgrade-libtiff-toolsoracle-linux-upgrade-mingw32-libtifforacle-linux-upgrade-mingw32-libtiff-staticoracle-linux-upgrade-mingw64-libtifforacle-linux-upgrade-mingw64-libtiff-static | Oct 10, 2025 | Sep 22, 2025 |
| Redhat_linux | redhat-upgrade-compat-libtiff3redhat-upgrade-compat-libtiff3-debuginforedhat-upgrade-compat-libtiff3-debugsourceredhat-upgrade-libtiffredhat-upgrade-libtiff-debuginforedhat-upgrade-libtiff-debugsourceredhat-upgrade-libtiff-develredhat-upgrade-libtiff-staticredhat-upgrade-libtiff-toolsredhat-upgrade-libtiff-tools-debuginforedhat-upgrade-mingw32-libtiffredhat-upgrade-mingw32-libtiff-debuginforedhat-upgrade-mingw32-libtiff-staticredhat-upgrade-mingw64-libtiffredhat-upgrade-mingw64-libtiff-debuginforedhat-upgrade-mingw64-libtiff-static | Oct 13, 2025 | Sep 22, 2025 | |
| Rocky_linux | rocky-upgrade-compat-libtiff3rocky-upgrade-compat-libtiff3-debuginforocky-upgrade-compat-libtiff3-debugsourcerocky-upgrade-libtiffrocky-upgrade-libtiff-debuginforocky-upgrade-libtiff-debugsourcerocky-upgrade-libtiff-develrocky-upgrade-libtiff-toolsrocky-upgrade-libtiff-tools-debuginfo | Feb 5, 2026 | Nov 7, 2025 | |
| Suse | — | suse-upgrade-libtiff-develsuse-upgrade-libtiff-devel-32bitsuse-upgrade-libtiff5suse-upgrade-libtiff5-32bitsuse-upgrade-libtiff6suse-upgrade-libtiff6-32bitsuse-upgrade-tiff | Dec 5, 2025 | Oct 10, 2025 |
| Ubuntu | ubuntu-pro-upgrade-gdal-binubuntu-pro-upgrade-libgdal-devubuntu-pro-upgrade-libgdal-javaubuntu-pro-upgrade-libgdal-perlubuntu-pro-upgrade-libgdal1hubuntu-pro-upgrade-libgdal1iubuntu-pro-upgrade-libqt5pdf5ubuntu-pro-upgrade-libqt5pdfwidgets5ubuntu-pro-upgrade-libqt5webengine-dataubuntu-pro-upgrade-libqt5webengine5ubuntu-pro-upgrade-libqt5webenginecore5ubuntu-pro-upgrade-libqt5webenginewidgets5ubuntu-pro-upgrade-libtiff5ubuntu-pro-upgrade-python-gdalubuntu-pro-upgrade-python3-gdalubuntu-pro-upgrade-qml-module-qtquick-pdfubuntu-pro-upgrade-qml-module-qtwebengineubuntu-pro-upgrade-qt5-image-formats-plugin-pdfubuntu-pro-upgrade-qtpdf5-devubuntu-pro-upgrade-qtwebengine5-devubuntu-pro-upgrade-qtwebengine5-dev-toolsubuntu-pro-upgrade-qtwebengine5-private-devubuntu-pro-upgrade-texmakerubuntu-pro-upgrade-texmaker-dataubuntu-upgrade-libtiff5ubuntu-upgrade-libtiff6 | Sep 30, 2025 | Sep 23, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Feb 9, 2026 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub