CVE-2016-9533

Critical

Published: 22/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In libtiff version 4.0.6, there are out-of-bounds write vulnerabilities in heap allocated buffers related to tif_pixarlog.c. This issue was reported as MSVR 35094, also known as 'PixarLog horizontalDifference heap-buffer-overflow.'

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in application crashes or malicious code execution. Organizations should be aware of the risks associated with using the vulnerable version of the library.

Recommendation

It is recommended to update the libtiff library to the latest version to mitigate this vulnerability. Additionally, an audit of applications using this library should be conducted to identify potential threats.

Original NVD description (English source)

tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."