https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:05:24.757276+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7585 ALSA-2022:7585 — Moderate: libtiff security update 2026-10-03T17:05:24.967686+00:00

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561) * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562) * libtiff: reachable assertion (CVE-2022-0865) * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924) * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355) * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844) * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891) * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908) * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05718 bdu:2022-05718 2026-10-03T17:05:24.967793+00:00 bdu:2022-05718 https://cve.radiocsirt.org/vuln/bell-cve-2022-0865 Withdrawn: BELL-CVE-2022-0865 — CVE-2022-0865 does not affect BellSoft software 2026-10-03T17:05:24.967816+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T17:05:24.967839+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-11302 EUVD-2026-11302 2026-10-03T17:05:24.967863+00:00 EUVD-2026-11302 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0865 fkie_cve-2022-0865 2026-10-03T17:05:24.967882+00:00

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.

 https://cve.radiocsirt.org/vuln/ghsa-6x45-qmh6-q92p GHSA-6x45-qmh6-q92p 2026-10-03T17:05:24.967915+00:00

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.

 https://cve.radiocsirt.org/vuln/gsd-2022-0865 gsd-2022-0865 2026-10-03T17:05:24.967940+00:00 gsd-2022-0865 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0865 msrc_CVE-2022-0865 — Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. F… 2026-10-03T17:05:24.967958+00:00 msrc_CVE-2022-0865 https://cve.radiocsirt.org/vuln/oesa-2022-1607 OESA-2022-1607 — libtiff security update 2026-10-03T17:05:24.967986+00:00

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP2: libtiff, openEuler:20.03-LTS-SP3: libtiff, openEuler:22.03-LTS: libtiff

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.(CVE-2022-0908) Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.(CVE-2022-0907) Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.(CVE-2022-0865) Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.(CVE-2022-0909) Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.(CVE-2022-0924)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12057-1 openSUSE-SU-2024:12057-1 — libtiff-devel-32bit-4.3.0-1.6 on GA media 2026-10-03T17:05:24.968054+00:00

libtiff-devel-32bit-4.3.0-1.6 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:1667-1 SUSE-SU-2022:1667-1 — Security update for tiff 2026-10-03T17:05:24.968085+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0865 UBUNTU-CVE-2022-0865 2026-10-03T17:05:24.968113+00:00

Affected: Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0922 WID-SEC-W-2022-0922 — libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T17:05:24.968146+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.