CVE-2016-9538

Critical

Published: 22/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In libtiff version 4.0.6, there is a vulnerability related to a buffer overflow in the readContigStripsIntoBuffer() function, leading to reading an undefined buffer.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to memory, potentially leading to arbitrary code execution or application crashes.

Recommendation

It is recommended to update the libtiff library to the latest version to mitigate this vulnerability.

Original NVD description (English source)

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.