https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:36:20.093814+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4241 ALSA-2021:4241 — Moderate: libtiff security and bug fix update 2026-10-03T20:36:20.379459+00:00

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

* libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01525 bdu:2021-01525 2026-10-03T20:36:20.379530+00:00 bdu:2021-01525 https://cve.radiocsirt.org/vuln/bell-cve-2020-35522 Withdrawn: BELL-CVE-2020-35522 — CVE-2020-35522 does not affect BellSoft software 2026-10-03T20:36:20.379547+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T20:36:20.379563+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-47600 EUVD-2026-47600 2026-10-03T20:36:20.379578+00:00 EUVD-2026-47600 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35522 fkie_cve-2020-35522 2026-10-03T20:36:20.379588+00:00

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

 https://cve.radiocsirt.org/vuln/ghsa-5hqr-x5p5-7g25 GHSA-5hqr-x5p5-7g25 2026-10-03T20:36:20.379608+00:00

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

 https://cve.radiocsirt.org/vuln/gsd-2020-35522 gsd-2020-35522 2026-10-03T20:36:20.379622+00:00 gsd-2020-35522 https://cve.radiocsirt.org/vuln/msrc_cve-2020-35522 msrc_CVE-2020-35522 — In LibTIFF there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort resulting i… 2026-10-03T20:36:20.379631+00:00 msrc_CVE-2020-35522 https://cve.radiocsirt.org/vuln/oesa-2021-1112 OESA-2021-1112 — libtiff security update 2026-10-03T20:36:20.379647+00:00

Affected: openEuler:20.03-LTS: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.(CVE-2020-35521)

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.(CVE-2020-35522) An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35523) A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35524)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0480-1 openSUSE-SU-2022:0480-1 — Security update for tiff 2026-10-03T20:36:20.379678+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/suse-su-2022:0480-1 SUSE-SU-2022:0480-1 — Security update for tiff 2026-10-03T20:36:20.379697+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-35522 UBUNTU-CVE-2020-35522 2026-10-03T20:36:20.379715+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0914 WID-SEC-W-2022-0914 — libTIFF: Mehrere Schwachstellen 2026-10-03T20:36:20.379737+00:00

Ein Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.