CVE-2016-9536

Critical

Published: 22/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The libtiff library version 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in the t2p_process_jpeg_strip() function.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, jeopardizing the integrity and confidentiality of data in the system.

Recommendation

It is recommended to update the libtiff library to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."