Every CVE Search/ Get API key

CVE-2006-2025

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows...

6.5 MediumPublic exploitFix available

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Exploit likelihood

10.8%Down 12.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
CVE-2006-2025
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
CVE-2006-2025
Updated
2026-11-02
EUVDEUVD-2006-2026 No score

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
EUVD-2006-2026
Updated
2026-11-03
GitHub AdvisoriesGHSA-qrfc-r8pv-4g98 No score

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows...

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
GHSA-qrfc-r8pv-4g98
Updated
2026-11-02
OSV No score

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
CVE-2006-2025
Updated
2026-11-02
OSVDEBIAN-CVE-2006-2025 No score

Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.

Record
DEBIAN-CVE-2006-2025
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 3.8.1
3.8.1
tiff
Debian:13
 before 3.8.1
3.8.1
tiff
Debian:14
 before 3.8.1
3.8.1
tiff
Debian:3.0
From an advisory covering 3 CVEs
 before 3.5.5-7woody1, plus listed versions
3.5.5-6.woody33.5.5-6.woody53.5.5-7
3.5.5-7woody1
tiff
Debian:3.1
From an advisory covering 3 CVEs
 before 3.7.2-3sarge1, plus listed versions
3.7.2-3
3.7.2-3sarge1
libtiff
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
Show 31 moreShow less
Affected packages
PackageAffectedFixed
libtiff-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 4 CVEs
 before 0:3.5.7-25.el3.1
0:3.5.7-25.el3.1
libtiff
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
libtiff-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 4 CVEs
 before 0:3.6.1-10
0:3.6.1-10
kdegraphics
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::as
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::desktop
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::es
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-debuginfo
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10
kdegraphics-devel
Red Hat:enterprise_linux:3::ws
From an advisory covering 10 CVEs
 before 7:3.1.3-3.10
7:3.1.3-3.10

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLibTiff 3.x - TIFFFetchData Integer Overflow2006-04-28

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-2025 is a medium vulnerability (CVSS 6.5) in Libtiff, published April 25, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.8%, the 95th percentile. Fixed in tiff 3.8.1.

References

Show 69 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open