CVE Vulnerability Catalog

A vulnerability in the libtiff library related to handling the SamplesPerPixel tag allows an attacker to cause a denial of service (DoS). Package updates are available for Amazon Linux 2023 that fix this issue.

An out-of-memory flaw was found in libtiff. Passing a crafted TIFF file to the TIFFOpen() API may allow a remote attacker to cause a denial of service via crafted input smaller than 379 KB.

An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure.

A vulnerability was found in LibTIFF up to 4.7.0. The function t2p_read_tiff_init of the file tools/tiff2pdf.c of the fax2ps component is affected. The manipulation leads to a null pointer dereference, and the attack requires local access.

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.

Improper input validation in Intel PROSet/Wireless WiFi software for Linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.

ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.

A flaw was found in the xdg-email component of xdg-utils 1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when passed to Thunderbird, potentially automatically attaching a victim's sensitive file.

A NULL pointer access occurs in the imagetopnm function of convert.c (jp2):1289 in OpenJPEG 2.1.2. Exploitation requires opening a crafted j2k file.

An integer overflow vulnerability was found in the tiftoimage function in OpenJPEG 2.1.2, resulting in a heap buffer overflow.

An infinite loop vulnerability in tiftoimage that results in a heap buffer overflow in convert_32s_C1P1 was found in OpenJPEG 2.1.2.

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue.

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

No detailed vulnerability description is available in the provided data. This entry refers to a Debian LTS security update (DLA).

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument. This may lead to application crashes.

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr). This may lead to application crashes.

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. Third parties dispute this because the LLVM security policy excludes language front-ends for which a malicious input file can cause undesirable behavior.