https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:03:29.841868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7585 ALSA-2022:7585 — Moderate: libtiff security update 2026-10-03T09:03:30.114988+00:00

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561) * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562) * libtiff: reachable assertion (CVE-2022-0865) * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924) * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355) * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844) * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891) * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908) * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05790 bdu:2022-05790 2026-10-03T09:03:30.115061+00:00 bdu:2022-05790 https://cve.radiocsirt.org/vuln/bell-cve-2022-0561 Withdrawn: BELL-CVE-2022-0561 — CVE-2022-0561 does not affect BellSoft software 2026-10-03T09:03:30.115079+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:03:30.115096+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-11051 EUVD-2026-11051 2026-10-03T09:03:30.115111+00:00 EUVD-2026-11051 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0561 fkie_cve-2022-0561 2026-10-03T09:03:30.115122+00:00

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

 https://cve.radiocsirt.org/vuln/ghsa-g7mf-pj82-5qhj GHSA-g7mf-pj82-5qhj 2026-10-03T09:03:30.115143+00:00

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

 https://cve.radiocsirt.org/vuln/gsd-2022-0561 gsd-2022-0561 2026-10-03T09:03:30.115158+00:00 gsd-2022-0561 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0561 msrc_CVE-2022-0561 — Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff… 2026-10-03T09:03:30.115169+00:00 msrc_CVE-2022-0561 https://cve.radiocsirt.org/vuln/oesa-2022-1551 OESA-2022-1551 — libtiff security update 2026-10-03T09:03:30.115186+00:00

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP2: libtiff, openEuler:20.03-LTS-SP3: libtiff

TIFF Library and Utilities. Security Fix(es): Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.(CVE-2022-0562) Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.(CVE-2022-0561)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12057-1 openSUSE-SU-2024:12057-1 — libtiff-devel-32bit-4.3.0-1.6 on GA media 2026-10-03T09:03:30.115227+00:00

libtiff-devel-32bit-4.3.0-1.6 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:1667-1 SUSE-SU-2022:1667-1 — Security update for tiff 2026-10-03T09:03:30.115250+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0561 UBUNTU-CVE-2022-0561 2026-10-03T09:03:30.115269+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0150 WID-SEC-W-2022-0150 — libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T09:03:30.115291+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.