https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:13:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2017-01835 bdu:2017-01835 https://cve.radiocsirt.org/vuln/bdu:2017-01835 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/certfr-2022-avi-650 https://cve.radiocsirt.org/vuln/cnvd-2017-07752 cnvd-2017-07752 https://cve.radiocsirt.org/vuln/cnvd-2017-07752 https://cve.radiocsirt.org/vuln/euvd-2026-209462 EUVD-2026-209462 https://cve.radiocsirt.org/vuln/euvd-2026-209462 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9117 <p>In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).</p> <p>In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9117 https://cve.radiocsirt.org/vuln/ghsa-v898-4vh8-7f99 <p>In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.</p> <p>In LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, leading to a heap-based buffer over-read in bmp2tiff.</p> https://cve.radiocsirt.org/vuln/ghsa-v898-4vh8-7f99 https://cve.radiocsirt.org/vuln/gsd-2017-9117 gsd-2017-9117 https://cve.radiocsirt.org/vuln/gsd-2017-9117 https://cve.radiocsirt.org/vuln/suse-su-2018:3879-1 <p>Security update for tiff</p> <p>Security update for tiff</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3879-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9117 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff</p> <p>In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff</p> <p>In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the activation point is in the bmp2tiff.c file (which was removed before the 4.0.7 release).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9117