https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:00:18.338484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4241 ALSA-2021:4241 — Moderate: libtiff security and bug fix update 2026-10-03T22:00:18.607459+00:00

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Integer overflow in tif_getimage.c (CVE-2020-35523)

* libtiff: Heap-based buffer overflow in TIFF2PDF tool (CVE-2020-35524)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35521)

* libtiff: Memory allocation failure in tiff2rgba (CVE-2020-35522)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-01527 bdu:2021-01527 2026-10-03T22:00:18.607552+00:00 bdu:2021-01527 https://cve.radiocsirt.org/vuln/bell-cve-2020-35524 Withdrawn: BELL-CVE-2020-35524 — CVE-2020-35524 does not affect BellSoft software 2026-10-03T22:00:18.607576+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T22:00:18.607599+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-47629 EUVD-2026-47629 2026-10-03T22:00:18.607620+00:00 EUVD-2026-47629 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35524 fkie_cve-2020-35524 2026-10-03T22:00:18.607637+00:00

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/ghsa-7xc8-4h5p-pc25 GHSA-7xc8-4h5p-pc25 2026-10-03T22:00:18.607670+00:00

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-35524 gsd-2020-35524 2026-10-03T22:00:18.607693+00:00 gsd-2020-35524 https://cve.radiocsirt.org/vuln/msrc_cve-2020-35524 msrc_CVE-2020-35524 — A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A spe… 2026-10-03T22:00:18.607709+00:00 msrc_CVE-2020-35524 https://cve.radiocsirt.org/vuln/oesa-2021-1112 OESA-2021-1112 — libtiff security update 2026-10-03T22:00:18.607734+00:00

Affected: openEuler:20.03-LTS: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):

A flaw was found in libtiff. Due to a memory allocation failure in tif_read.c, a crafted TIFF file can lead to an abort, resulting in denial of service.(CVE-2020-35521)

In LibTIFF, there is a memory malloc failure in tif_pixarlog.c. A crafted TIFF document can lead to an abort, resulting in a remote denial of service attack.(CVE-2020-35522) An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35523) A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35524)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0480-1 openSUSE-SU-2022:0480-1 — Security update for tiff 2026-10-03T22:00:18.607779+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/suse-su-2022:0480-1 SUSE-SU-2022:0480-1 — Security update for tiff 2026-10-03T22:00:18.607807+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-35524 UBUNTU-CVE-2020-35524 2026-10-03T22:00:18.607833+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0914 WID-SEC-W-2022-0914 — libTIFF: Mehrere Schwachstellen 2026-10-03T22:00:18.607869+00:00

Ein Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.