Every CVE Search/ Get API key

CVE-2023-0803

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers...

6.8 MediumFix available

CVE-2023-0803 is a medium vulnerability (CVSS 6.8) in Libtiff, published February 13, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in tiff 4.4.0-r2.

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.43%Down 0.5 points since Feb 14, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
CVE-2023-0803
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2023-12808 6.8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
EUVD-2023-12808
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-2rv8-rcwh-2x8r 5.5

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers...

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
GHSA-2rv8-rcwh-2x8r
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 6.8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
CVE-2023-0803
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2023-0803 5.5

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
ALPINE-CVE-2023-0803
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-13389 5.5

CVE-2023-0803 affecting package libtiff for versions less than 4.4.0-8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
AZL-13389
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVBELL-CVE-2023-0803 5.5

CVE-2023-0803 does not affect BellSoft software

Record
BELL-CVE-2023-0803
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.8

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
CVE-2023-0803
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-0803 5.5

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
DEBIAN-CVE-2023-0803
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-299 5.5

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in `tools/tiffcrop.c:3516`, allowing attackers...

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
JLSEC-2025-299
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1128 5.5

libtiff security update

This libtiff provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0801)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0797)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0796)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0799)

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0804)

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0802)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0795)

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0803)

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.(CVE-2023-0800)

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e.(CVE-2023-0798)

Record
OESA-2023-1128
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3711 6.1

Red Hat Security Advisory: libtiff security update

Record
RHSA-2023:3711
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:5353 6.1

Red Hat Security Advisory: libtiff security update

Record
RHSA-2023:5353
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2023:3711 6.1

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

  • libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)

  • libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)

  • libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)

  • libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)

  • libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)

  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)

  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)

  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3711
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-0803 5.5

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127.

Record
UBUNTU-CVE-2023-0803
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVALSA-2023:3711 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
  • libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)
  • libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)
  • libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)
  • libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)
  • libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)
  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3711
Updated
2026-11-02
OSVALSA-2023:5353 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5353
Updated
2026-11-02
OSVMGASA-2023-0080 No score

Updated libtiff packages fix security vulnerability

Out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0795)

Out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0796)

Out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0797)

Out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0798)

Out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file (CVE-2023-0799)

Out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0800)

Out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0801)

Out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0802)

Out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0803)

Out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2023-0804)

Record
MGASA-2023-0080
Updated
2026-11-02
OSVopenSUSE-SU-2024:12730-1 No score

libtiff-devel-32bit-4.5.0-3.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.5.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12730-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20995-1 No score

Security update for tiff

This update for tiff fixes the following issues

Security issues:

  • CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
  • CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

  • QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).
Record
openSUSE-SU-2026:20995-1
Updated
2026-11-02
OSVRLSA-2023:5353 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)

  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)

  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)

  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:5353
Updated
2026-11-02
OSVSUSE-SU-2023:2321-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Fixed multiple out of bounds read/write security issues:

CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231), CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234), CVE-2023-0804 (bsc#1208236).

Record
SUSE-SU-2023:2321-1
Updated
2026-11-02
OSVSUSE-SU-2023:2334-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Fixed multiple out of bounds read/write security issues:

CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231), CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234), CVE-2023-0804 (bsc#1208236).

Record
SUSE-SU-2023:2334-1
Updated
2026-11-02
OSVSUSE-SU-2026:22234-1 No score

Security update for tiff

This update for tiff fixes the following issues

Security issues:

  • CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
  • CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

  • QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).
Record
SUSE-SU-2026:22234-1
Updated
2026-11-02
OSVSUSE-SU-2026:22306-1 No score

Security update for tiff

This update for tiff fixes the following issues

Security issues:

  • CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
  • CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

  • QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).
Record
SUSE-SU-2026:22306-1
Updated
2026-11-02
OSVUSN-5923-1 No score

tiff vulnerabilities

It was discovered that LibTIFF could be made to read out of bounds when processing certain malformed image files with the tiffcrop tool. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service. (CVE-2023-0795, CVE-2023-0796, CVE-2023-0797, CVE-2023-0798, CVE-2023-0799)

It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop tool. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-0800, CVE-2023-0801, CVE-2023-0802, CVE-2023-0803, CVE-2023-0804)

Record
USN-5923-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Alpine:v3.15
 before 4.4.0-r2
4.4.0-r2
tiff
Alpine:v3.16
 before 4.4.0-r2
4.4.0-r2
tiff
Alpine:v3.17
 before 4.4.0-r3
4.4.0-r3
tiff
Alpine:v3.18
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.19
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.20
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.21
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.22
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.23
 before 4.5.0-r5
4.5.0-r5
tiff
Alpine:v3.24
 before 4.5.0-r5
4.5.0-r5
Show 63 moreShow less
Affected packages
PackageAffectedFixed
libtiff
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
libtiff-devel
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
libtiff-tools
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
libtiff
AlmaLinux:8
 before 4.0.9-29.el8_8
4.0.9-29.el8_8
libtiff-devel
AlmaLinux:8
 before 4.0.9-29.el8_8
4.0.9-29.el8_8
libtiff-tools
AlmaLinux:8
 before 4.0.9-29.el8_8
4.0.9-29.el8_8
libtiff
Azure Linux:2
 before 4.4.0-8
4.4.0-8
tiff
Debian:12
 before 4.5.0-5
4.5.0-5
tiff
Debian:13
 before 4.5.0-5
4.5.0-5
tiff
Debian:14
 before 4.5.0-5
4.5.0-5
tiff
Debian:10
 before 4.1.0+git191117-2~deb10u7, plus listed versions
4.0.10+git190814-14.0.10+git190818-14.0.10+git190903-14.0.10+git191003-14.0.10-4
Show 8 moreShow less
4.1.0+git191117-14.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u24.1.0+git191117-2~deb10u34.1.0+git191117-2~deb10u44.1.0+git191117-2~deb10u54.1.0+git191117-2~deb10u64.1.0-1
4.1.0+git191117-2~deb10u7
tiff
Debian:11
 before 4.2.0-1+deb11u4, plus listed versions
4.2.0-14.2.0-1+deb11u14.2.0-1+deb11u24.2.0-1+deb11u3
4.2.0-1+deb11u4
Libtiff_jll
Julia
 before 4.5.1+0
4.5.1+0
libtiff
Mageia:8
 before 4.2.0-1.14.mga8
4.2.0-1.14.mga8
libtiff
openEuler:20.03-LTS-SP1
 before 4.3.0-9.oe1
4.3.0-9.oe1
libtiff
openEuler:20.03-LTS-SP3
 before 4.3.0-10.oe1
4.3.0-10.oe1
libtiff
openEuler:22.03-LTS
 before 4.3.0-24.oe2203sp1
4.3.0-24.oe2203sp1
libtiff
openEuler:22.03-LTS-SP1
 before 4.3.0-24.oe2203sp1
4.3.0-24.oe2203sp1
libtiff
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
libtiff
Rocky Linux:9
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff
Rocky Linux:8
 before 0:4.0.9-29.el8_8
0:4.0.9-29.el8_8
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 4.0.9-44.68.1
4.0.9-44.68.1
tiff
SUSE:Linux Enterprise Server 12 SP5
 before 4.0.9-44.68.1
4.0.9-44.68.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 4.0.9-44.68.1
4.0.9-44.68.1
tiff
SUSE:Linux Enterprise Micro 5.3
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Micro 5.4
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Real Time 15 SP3
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Enterprise Micro 5.2
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
openSUSE:Leap Micro 5.3
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
openSUSE:Leap 15.4
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
openSUSE:Leap 15.5
 before 4.0.9-150000.45.28.1
4.0.9-150000.45.28.1
tiff
SUSE:Linux Micro 6.2
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
SUSE:Linux Enterprise Server 16.0
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff
Ubuntu:Pro:14.04:LTS
 before 4.0.3-7ubuntu0.11+esm7, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 16 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm6
4.0.3-7ubuntu0.11+esm7
tiff
Ubuntu:Pro:16.04:LTS
 before 4.0.6-1ubuntu0.8+esm10, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 14 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm9
4.0.6-1ubuntu0.8+esm10
tiff
Ubuntu:18.04:LTS
 before 4.0.9-5ubuntu0.10, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 12 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.9
4.0.9-5ubuntu0.10
tiff
Ubuntu:20.04:LTS
 before 4.1.0+git191117-2ubuntu0.20.04.8, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 6 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.7
4.1.0+git191117-2ubuntu0.20.04.8
tiff
Ubuntu:22.04:LTS
 before 4.3.0-6ubuntu0.4, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4
Show 5 moreShow less
4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.3
4.3.0-6ubuntu0.4
tiff
openSUSE:Tumbleweed
 before 4.5.0-3.1
4.5.0-3.1
tiff
openSUSE:Leap 16.0
 before 4.7.1-160000.2.1
4.7.1-160000.2.1
tiff-man
openSUSE:Leap 16.0
 before 4.7.1-160000.2.1
4.7.1-160000.2.1

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 115 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open