CVE Catalog
CVE-2016-9537
CriticalSummary
The libtiff library version 4.0.6 has out-of-bounds write vulnerabilities in the tiffcrop.c tool. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.
Risk Assessment
These vulnerabilities may lead to unauthorized memory access, potentially resulting in data leakage or remote code execution.
Recommendation
It is recommended to update the libtiff library to the latest version to mitigate these vulnerabilities.
Original NVD description (English source)
tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as MSVR 35093, MSVR 35096, and MSVR 35097.