CVE Catalog

CVE-2016-9540

Critical
Published: Translated: NVD NIST

Summary

In libtiff version 4.0.6, there is an out-of-bounds write in the tiffcp tool that affects tiled images with odd tile width versus image width. This issue was reported as MSVR 35103, also known as 'cpStripToTile heap-buffer-overflow.'

Risk Assessment

Exploitation of this vulnerability may lead to heap buffer overflow, potentially resulting in unauthorized memory access or execution of malicious code. Organizations should be aware of the risks associated with processing images in this version of the library.

Recommendation

It is recommended to update the libtiff library to the latest version to mitigate this vulnerability. Additionally, an audit of applications using this library should be conducted to identify potential threats.

Original NVD description (English source)

tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."

Vulnerability data from NVD (NIST) · CISA KEV · EPSS