https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:44:59.448603+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2340 ALSA-2023:2340 — Moderate: libtiff security update 2026-10-03T07:44:59.603789+00:00

Affected: AlmaLinux:9: libtiff, AlmaLinux:9: libtiff-devel, AlmaLinux:9: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598) * libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599) * libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626) * libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627) * libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970) * libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645) * libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774) * libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-05401 bdu:2023-05401 2026-10-03T07:44:59.603865+00:00 bdu:2023-05401 https://cve.radiocsirt.org/vuln/bell-cve-2022-4645 Withdrawn: BELL-CVE-2022-4645 — CVE-2022-4645 does not affect BellSoft software 2026-10-03T07:44:59.603883+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T07:44:59.603899+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/cnvd-2023-15744 cnvd-2023-15744 2026-10-03T07:44:59.603913+00:00 cnvd-2023-15744 https://cve.radiocsirt.org/vuln/euvd-2026-227234 EUVD-2026-227234 2026-10-03T07:44:59.603926+00:00 EUVD-2026-227234 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4645 fkie_cve-2022-4645 2026-10-03T07:44:59.603936+00:00

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

 https://cve.radiocsirt.org/vuln/ghsa-6fr2-gj2w-xgr6 GHSA-6fr2-gj2w-xgr6 2026-10-03T07:44:59.603957+00:00

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

 https://cve.radiocsirt.org/vuln/gsd-2022-4645 gsd-2022-4645 2026-10-03T07:44:59.603971+00:00 gsd-2022-4645 https://cve.radiocsirt.org/vuln/msrc_cve-2022-4645 msrc_CVE-2022-4645 — LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948 allowing attackers to cause a denial-of-service… 2026-10-03T07:44:59.603982+00:00 msrc_CVE-2022-4645 https://cve.radiocsirt.org/vuln/rhsa-2023:2340 RHSA-2023:2340 — Red Hat Security Advisory: libtiff security update 2026-10-03T07:44:59.603998+00:00

libtiff: heap Buffer overflows in tiffcrop.c libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c libtiff: integer overflow in function TIFFReadRGBATileExt of the file libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c libtiff: Heap buffer overflow in tiffcp() at tiffcp.c libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4645 UBUNTU-CVE-2022-4645 2026-10-03T07:44:59.604027+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0570 WID-SEC-W-2023-0570 — libTIFF: Schwachstelle ermöglicht Denial of Service 2026-10-03T07:44:59.604052+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.