https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:31:38.440094+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:3711 ALSA-2023:3711 — Moderate: libtiff security update 2026-10-03T03:31:38.673550+00:00

Affected: AlmaLinux:9: libtiff, AlmaLinux:9: libtiff-devel, AlmaLinux:9: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281) * libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795) * libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796) * libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797) * libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798) * libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800) * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801) * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the…

 https://cve.radiocsirt.org/vuln/bdu:2023-00386 bdu:2023-00386 2026-10-03T03:31:38.673627+00:00 bdu:2023-00386 https://cve.radiocsirt.org/vuln/bell-cve-2022-48281 Withdrawn: BELL-CVE-2022-48281 — CVE-2022-48281 does not affect BellSoft software 2026-10-03T03:31:38.673644+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2025-avi-0969 certfr-2025-avi-0969 — De multiples vulnérabilités ont été découvertes dans les produits VMware. Elles permettent à un attaquant de provoquer… 2026-10-03T03:31:38.673660+00:00 certfr-2025-avi-0969 https://cve.radiocsirt.org/vuln/euvd-2026-226815 EUVD-2026-226815 2026-10-03T03:31:38.673674+00:00 EUVD-2026-226815 https://cve.radiocsirt.org/vuln/fkie_cve-2022-48281 fkie_cve-2022-48281 2026-10-03T03:31:38.673684+00:00

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

 https://cve.radiocsirt.org/vuln/ghsa-4qr3-39h9-qwp4 GHSA-4qr3-39h9-qwp4 2026-10-03T03:31:38.673713+00:00

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

 https://cve.radiocsirt.org/vuln/gsd-2022-48281 gsd-2022-48281 2026-10-03T03:31:38.673727+00:00 gsd-2022-48281 https://cve.radiocsirt.org/vuln/msrc_cve-2022-48281 msrc_CVE-2022-48281 — processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g. "WRITE of siz… 2026-10-03T03:31:38.673737+00:00 msrc_CVE-2022-48281 https://cve.radiocsirt.org/vuln/oesa-2023-1047 OESA-2023-1047 — libtiff security update 2026-10-03T03:31:38.673752+00:00

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP3: libtiff, openEuler:22.03-LTS: libtiff, openEuler:22.03-LTS-SP1: libtiff

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.(CVE-2022-48281)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12643-1 openSUSE-SU-2024:12643-1 — libtiff-devel-32bit-4.5.0-2.1 on GA media 2026-10-03T03:31:38.673780+00:00

libtiff-devel-32bit-4.5.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2023:0199-1 SUSE-SU-2023:0199-1 — Security update for tiff 2026-10-03T03:31:38.673795+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-48281 UBUNTU-CVE-2022-48281 2026-10-03T03:31:38.673809+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0170 WID-SEC-W-2023-0170 — libTIFF: Schwachstelle ermöglicht nicht spezifizierten Angriff 2026-10-03T03:31:38.673832+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.