https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:06:00.993315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:7585 ALSA-2022:7585 — Moderate: libtiff security update 2026-10-02T20:06:01.008013+00:00

Affected: AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: Denial of Service via crafted TIFF file (CVE-2022-0561) * libtiff: Null source pointer lead to Denial of Service via crafted TIFF file (CVE-2022-0562) * libtiff: reachable assertion (CVE-2022-0865) * libtiff: Out-of-bounds Read error in tiffcp (CVE-2022-0924) * libtiff: stack-buffer-overflow in tiffcp.c in main() (CVE-2022-1355) * libtiff: out-of-bounds read in _TIFFmemcpy() in tif_unix.c (CVE-2022-22844) * libtiff: heap buffer overflow in extractImageSection (CVE-2022-0891) * tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c (CVE-2022-0908) * tiff: Divide By Zero error in tiffcrop (CVE-2022-0909)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-05792 bdu:2022-05792 2026-10-02T20:06:01.008084+00:00 bdu:2022-05792 https://cve.radiocsirt.org/vuln/bell-cve-2022-0891 Withdrawn: BELL-CVE-2022-0891 — CVE-2022-0891 does not affect BellSoft software 2026-10-02T20:06:01.008101+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T20:06:01.008117+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-11335 EUVD-2026-11335 2026-10-02T20:06:01.008131+00:00 EUVD-2026-11335 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0891 fkie_cve-2022-0891 2026-10-02T20:06:01.008141+00:00

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

 https://cve.radiocsirt.org/vuln/ghsa-ppwc-w499-gfmh GHSA-ppwc-w499-gfmh 2026-10-02T20:06:01.008162+00:00

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

 https://cve.radiocsirt.org/vuln/gsd-2022-0891 gsd-2022-0891 2026-10-02T20:06:01.008177+00:00 gsd-2022-0891 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0891 msrc_CVE-2022-0891 — A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker t… 2026-10-02T20:06:01.008187+00:00 msrc_CVE-2022-0891 https://cve.radiocsirt.org/vuln/oesa-2022-1594 OESA-2022-1594 — libtiff security update 2026-10-02T20:06:01.008202+00:00

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP2: libtiff, openEuler:20.03-LTS-SP3: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact(CVE-2022-0891)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12057-1 openSUSE-SU-2024:12057-1 — libtiff-devel-32bit-4.3.0-1.6 on GA media 2026-10-02T20:06:01.008228+00:00

libtiff-devel-32bit-4.3.0-1.6 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2022:1667-1 SUSE-SU-2022:1667-1 — Security update for tiff 2026-10-02T20:06:01.008247+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0891 UBUNTU-CVE-2022-0891 2026-10-02T20:06:01.008263+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0922 WID-SEC-W-2022-0922 — libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T20:06:01.008285+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.