https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 09:30:58 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-18495 <p><strong>Affected:</strong> Alpaquita:25: tiff, Alpaquita:stream: tiff, BellSoft Hardened Containers:25: tiff, BellSoft Hardened Containers:stream: tiff</p> <p><strong>Affected:</strong> Alpaquita:25: tiff, Alpaquita:stream: tiff, BellSoft Hardened Containers:25: tiff, BellSoft Hardened Containers:stream: tiff</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-18495 https://cve.radiocsirt.org/vuln/euvd-2026-366940 EUVD-2026-366940 https://cve.radiocsirt.org/vuln/euvd-2026-366940 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18495 <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18495 https://cve.radiocsirt.org/vuln/ghsa-6x88-8xw5-p2gw <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> https://cve.radiocsirt.org/vuln/ghsa-6x88-8xw5-p2gw https://cve.radiocsirt.org/vuln/oesa-2026-4063 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libtiff, openEuler:22.03-LTS-SP4: libtiff, openEuler:24.03-LTS-SP1: libtiff, openEuler:24.03-LTS-SP3: libtiff, openEuler:24.03-LTS-SP4: libtiff</p> <p>This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.(CVE-2026-18495)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libtiff, openEuler:22.03-LTS-SP4: libtiff, openEuler:24.03-LTS-SP1: libtiff, openEuler:24.03-LTS-SP3: libtiff, openEuler:24.03-LTS-SP4: libtiff</p> <p>This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es):</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.(CVE-2026-18495)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4063 https://cve.radiocsirt.org/vuln/rhsa-2026:53467 <p>libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough libtiff: libtiff: Arbitrary code execution via process_command_opts() function libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component libtiff: libtiff: Arbitrary code execution via crafted TIFF image</p> <p>libtiff: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough libtiff: libtiff: Arbitrary code execution via process_command_opts() function libtiff: libtiff: Arbitrary code execution via thumbnail.c: main() component libtiff: libtiff: Arbitrary code execution via crafted TIFF image</p> https://cve.radiocsirt.org/vuln/rhsa-2026:53467 https://cve.radiocsirt.org/vuln/suse-su-2026:4252-1 <p>Security update for tiff</p> <p>Security update for tiff</p> https://cve.radiocsirt.org/vuln/suse-su-2026:4252-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18495 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:18.04:LTS: neuron, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:Pro:20.04:LTS: tiff, Ubuntu:20.04:LTS: neuron and 11 more</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:Pro:18.04:LTS: tiff, Ubuntu:18.04:LTS: neuron, Ubuntu:Pro:18.04:LTS: qtwebengine-opensource-src, Ubuntu:Pro:18.04:LTS: texmaker, Ubuntu:Pro:20.04:LTS: tiff, Ubuntu:20.04:LTS: neuron and 11 more</p> <p>A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-18495 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3338 <p>Ein lokaler Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in libTIFF ausnutzen, um einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3338