https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:01:09.104293+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:3711 ALSA-2023:3711 — Moderate: libtiff security update 2026-10-03T14:01:09.361494+00:00

Affected: AlmaLinux:9: libtiff, AlmaLinux:9: libtiff-devel, AlmaLinux:9: libtiff-tools

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

* libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281) * libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795) * libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796) * libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797) * libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798) * libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800) * libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801) * libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802) * libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803) * libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the…

 https://cve.radiocsirt.org/vuln/bdu:2023-05407 bdu:2023-05407 2026-10-03T14:01:09.361574+00:00 bdu:2023-05407 https://cve.radiocsirt.org/vuln/bell-cve-2023-0804 Withdrawn: BELL-CVE-2023-0804 — CVE-2023-0804 does not affect BellSoft software 2026-10-03T14:01:09.361592+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:01:09.361608+00:00 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-224260 EUVD-2026-224260 2026-10-03T14:01:09.361623+00:00 EUVD-2026-224260 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0804 fkie_cve-2023-0804 2026-10-03T14:01:09.361634+00:00

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

 https://cve.radiocsirt.org/vuln/ghsa-wq4c-r2c3-fv9c GHSA-wq4c-r2c3-fv9c 2026-10-03T14:01:09.361655+00:00

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

 https://cve.radiocsirt.org/vuln/gsd-2023-0804 gsd-2023-0804 2026-10-03T14:01:09.361670+00:00 gsd-2023-0804 https://cve.radiocsirt.org/vuln/msrc_cve-2023-0804 msrc_CVE-2023-0804 — LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609 allowing attackers to cause a denial-of-s… 2026-10-03T14:01:09.361686+00:00 msrc_CVE-2023-0804 https://cve.radiocsirt.org/vuln/oesa-2023-1128 OESA-2023-1128 — libtiff security update 2026-10-03T14:01:09.361704+00:00

Affected: openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP3: libtiff, openEuler:22.03-LTS: libtiff, openEuler:22.03-LTS-SP1: libtiff

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0801) LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0797) LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0796) LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0799) LibTIFF 4.4.0…

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12730-1 openSUSE-SU-2024:12730-1 — libtiff-devel-32bit-4.5.0-3.1 on GA media 2026-10-03T14:01:09.361785+00:00

libtiff-devel-32bit-4.5.0-3.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2023:2321-1 SUSE-SU-2023:2321-1 — Security update for tiff 2026-10-03T14:01:09.361807+00:00

Security update for tiff

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-0804 UBUNTU-CVE-2023-0804 2026-10-03T14:01:09.361827+00:00

Affected: Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0350 WID-SEC-W-2023-0350 — libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T14:01:09.361852+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.