CVE-2005-1544

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary...

7.5 HighPublic exploitFix available

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Exploit likelihood

14.4%Down 28.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: CVE-2005-1544
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: CVE-2005-1544
Updated: 2026-11-02

EUVDEUVD-2005-1547 No score

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: EUVD-2005-1547
Updated: 2026-11-03

GitHub AdvisoriesGHSA-45px-6f9w-fmpf No score

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary...

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: GHSA-45px-6f9w-fmpf
Updated: 2026-11-02

OSV No score

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: CVE-2005-1544
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-1544 No score

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Record: DEBIAN-CVE-2005-1544
Updated: 2026-11-02

Affected products

libtiff

Affected packages

Affected packages
Package	Affected	Fixed
`tiff` Debian:12	before 3.7.2-3	3.7.2-3
`tiff` Debian:13	before 3.7.2-3	3.7.2-3
`tiff` Debian:14	before 3.7.2-3	3.7.2-3
`tiff` Debian:3.0	before 3.5.5-7, plus listed versions 3.5.5-6.woody33.5.5-6.woody5	3.5.5-7

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	LibTiff 3.7.1 - BitsPerSample Tag Local Buffer Overflow	2006-03-05

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1544 is a high vulnerability (CVSS 7.5) in Libtiff, published May 14, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. Fixed in tiff 3.7.2-3.

References

Show 11 moreShow less