CVE-2025-61143
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component...
5.5 MediumFix available
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.14%Up 0.1 points since Feb 24, 2026
What each source reports
NVD Score used
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
EUVDEUVD-2025-207646
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
EUVD-2025-207646- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-p884-v7p5-5858
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component...
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
GHSA-p884-v7p5-5858- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVBELL-CVE-2025-61143
- Record
BELL-CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2025-61143
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
DEBIAN-CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-484
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
JLSEC-2026-484- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2026:7504
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7504- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-61143
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
UBUNTU-CVE-2025-61143- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-78308 No score
CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
AZL-78308- Updated
- 2026-11-05
OSVAZL-78327 No score
CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
- Record
AZL-78327- Updated
- 2026-11-02
OSVCLSA-2026-1773051259 No score
libtiff: Fix of CVE-2025-61143
- CVE-2025-61143: fix OOB in tiffdither and fix null pointer dereference in tiffcrop
- Record
CLSA-2026-1773051259- Updated
- 2026-11-02
OSVCLSA-2026-1774273237 No score
libtiff: Fix of CVE-2025-61143
- CVE-2025-61143: fix NULL pointer dereference in tiffcrop add null checks and pointer validation, prevent crash
- Record
CLSA-2026-1774273237- Updated
- 2026-11-02
OSVMGASA-2026-0105 No score
Updated libtiff packages fix security vulnerabilities
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. (CVE-2025-61143) libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. (CVE-2025-61144)
- Record
MGASA-2026-0105- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-61143 No score
CVE-2025-61143 in tiff - Patched by Root
Root has patched CVE-2025-61143 in the tiff package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-61143- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-61143 No score
CVE-2025-61143 in tiff - Patched by Root
Root has patched CVE-2025-61143 in the tiff package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2025-61143- Updated
- 2026-11-02
OSVSUSE-SU-2026:1407-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).
- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
- Record
SUSE-SU-2026:1407-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1408-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).
- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
- Record
SUSE-SU-2026:1408-1- Updated
- 2026-11-02
OSVUSN-8113-1 No score
tiff vulnerabilities
It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143)
It was discovered that LibTIFF did not properly handle memory when processing malformed TIFF directories. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61144)
- Record
USN-8113-1- Updated
- 2026-11-02
OSVUSN-8113-2 No score
tiff vulnerabilities
USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS.
Original advisory details:
It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143)
It was discovered that LibTIFF did not properly handle memory when processing malformed TIFF directories. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61144)
- Record
USN-8113-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtiffAzure Linux:3 |
before 4.6.0-12 | 4.6.0-12 |
libtiffAzure Linux:2 |
before 4.6.0-12 | 4.6.0-12 |
tiffAlpaquita:23 |
4.4.0-r1 up to 4.4.0-r6 | 4.4.0-r6 |
tiffAlpaquita:25 |
4.7.0-r0 up to 4.7.1-r0 | 4.7.1-r0 |
tiffAlpaquita:stream |
4.4.0-r1 up to 4.7.1-r0 | 4.7.1-r0 |
tiffBellSoft Hardened Containers:23 |
4.4.0-r1 up to 4.4.0-r6 | 4.4.0-r6 |
tiffBellSoft Hardened Containers:25 |
4.7.0-r0 up to 4.7.1-r0 | 4.7.1-r0 |
tiffBellSoft Hardened Containers:stream |
4.4.0-r1 up to 4.7.1-r0 | 4.7.1-r0 |
libtiffTuxCare:AlmaLinux:9.6 |
before 4.4.0-13.el9_6.2.tuxcare.els5 | 4.4.0-13.el9_6.2.tuxcare.els5 |
libtiff-develTuxCare:AlmaLinux:9.6 |
before 4.4.0-13.el9_6.2.tuxcare.els5 | 4.4.0-13.el9_6.2.tuxcare.els5 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libtiff-staticTuxCare:AlmaLinux:9.6 |
before 4.4.0-13.el9_6.2.tuxcare.els5 | 4.4.0-13.el9_6.2.tuxcare.els5 |
libtiff-toolsTuxCare:AlmaLinux:9.6 |
before 4.4.0-13.el9_6.2.tuxcare.els5 | 4.4.0-13.el9_6.2.tuxcare.els5 |
libtiffTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els9 | 4.4.0-8.el9_2.tuxcare.els9 |
libtiff-develTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els9 | 4.4.0-8.el9_2.tuxcare.els9 |
libtiff-staticTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els9 | 4.4.0-8.el9_2.tuxcare.els9 |
libtiff-toolsTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els9 | 4.4.0-8.el9_2.tuxcare.els9 |
tiffDebian:12 |
All versions, plus listed versions 4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u34.5.0-6+deb12u4 Show 18 moreShow less4.5.1+git230720-14.5.1+git230720-24.5.1+git230720-34.5.1+git230720-44.5.1+git230720-54.5.1-14.5.1~rc3-14.6.0-14.6.0-24.7.0-14.7.0-24.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1 |
None known |
tiffDebian:13 |
All versions, plus listed versions 4.7.0-34.7.0-3+deb13u14.7.0-3+deb13u24.7.0-3+deb13u34.7.0-4 Show 5 moreShow less4.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1 |
None known |
tiffDebian:14 |
before 4.7.1-1, plus listed versions 4.7.0-34.7.0-44.7.0-5 |
4.7.1-1 |
Libtiff_jllJulia |
before 4.7.2+0 | 4.7.2+0 |
libtiffMageia:9 From an advisory covering 2 CVEs |
before 4.5.1-1.7.mga9 | 4.5.1-1.7.mga9 |
libtiffRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-toolsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
tiffRoot:Debian:12 |
before 4.5.0-6+deb12u4.aikido.20 | 4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22 |
rootio-tiffRoot:Debian:12 |
before 4.5.0-6+deb12u4.aikido.20 | 4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22 |
tiffRoot:Debian:13 |
before 4.7.0-3+deb13u3.aikido.8 | 4.7.0-3+deb13u3.aikido.84.7.0-3+deb13u3.aikido.94.7.0-3+deb13u3.aikido.74.7.0-3+deb13u3.aikido.10 |
rootio-tiffRoot:Debian:13 |
before 4.7.0-3+deb13u3.aikido.8 | 4.7.0-3+deb13u3.aikido.84.7.0-3+deb13u3.aikido.94.7.0-3+deb13u3.aikido.74.7.0-3+deb13u3.aikido.10 |
tiffSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 4.0.9-44.109.1 | 4.0.9-44.109.1 |
tiffSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
gdalUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.9.0-3.1ubuntu41.9.0-3.1ubuntu61.10.1+dfsg-21.10.1+dfsg-2build11.10.1+dfsg-3 Show 8 moreShow less1.10.1+dfsg-3build11.10.1+dfsg-3build21.10.1+dfsg-3ubuntu11.10.1+dfsg-3ubuntu21.10.1+dfsg-5ubuntu11.10.1+dfsg-5ubuntu1+esm11.10.1+dfsg-5ubuntu1+esm21.10.1+dfsg-5ubuntu1+esm3 |
None known |
tiffUbuntu:Pro:14.04:LTS |
before 4.0.3-7ubuntu0.11+esm17, plus listed versions 4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7 Show 26 moreShow less4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm84.0.3-7ubuntu0.11+esm94.0.3-7ubuntu0.11+esm104.0.3-7ubuntu0.11+esm114.0.3-7ubuntu0.11+esm124.0.3-7ubuntu0.11+esm134.0.3-7ubuntu0.11+esm144.0.3-7ubuntu0.11+esm154.0.3-7ubuntu0.11+esm16 |
4.0.3-7ubuntu0.11+esm17 |
tiffUbuntu:Pro:16.04:LTS |
before 4.0.6-1ubuntu0.8+esm20, plus listed versions 4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2 Show 24 moreShow less4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm114.0.6-1ubuntu0.8+esm124.0.6-1ubuntu0.8+esm134.0.6-1ubuntu0.8+esm144.0.6-1ubuntu0.8+esm154.0.6-1ubuntu0.8+esm164.0.6-1ubuntu0.8+esm174.0.6-1ubuntu0.8+esm184.0.6-1ubuntu0.8+esm19 |
4.0.6-1ubuntu0.8+esm20 |
gdalUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.11.2+dfsg-3ubuntu31.11.2+dfsg-3ubuntu41.11.3+dfsg-2build11.11.3+dfsg-2build21.11.3+dfsg-2build3 Show 5 moreShow less1.11.3+dfsg-31.11.3+dfsg-3build11.11.3+dfsg-3build21.11.3+dfsg-3ubuntu0.1~esm11.11.3+dfsg-3ubuntu0.1~esm2 |
None known |
tiffUbuntu:Pro:18.04:LTS |
before 4.0.9-5ubuntu0.10+esm10, plus listed versions 4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3 Show 22 moreShow less4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm14.0.9-5ubuntu0.10+esm24.0.9-5ubuntu0.10+esm34.0.9-5ubuntu0.10+esm44.0.9-5ubuntu0.10+esm54.0.9-5ubuntu0.10+esm64.0.9-5ubuntu0.10+esm74.0.9-5ubuntu0.10+esm84.0.9-5ubuntu0.10+esm9 |
4.0.9-5ubuntu0.10+esm10 |
neuronUbuntu:18.04:LTS |
All versions, plus listed versions 7.5-1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1 |
None known |
texmakerUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1 |
None known |
tiffUbuntu:Pro:20.04:LTS |
before 4.1.0+git191117-2ubuntu0.20.04.14+esm3, plus listed versions 4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1 Show 15 moreShow less4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.84.1.0+git191117-2ubuntu0.20.04.94.1.0+git191117-2ubuntu0.20.04.104.1.0+git191117-2ubuntu0.20.04.114.1.0+git191117-2ubuntu0.20.04.124.1.0+git191117-2ubuntu0.20.04.134.1.0+git191117-2ubuntu0.20.04.144.1.0+git191117-2ubuntu0.20.04.14+esm14.1.0+git191117-2ubuntu0.20.04.14+esm2 |
4.1.0+git191117-2ubuntu0.20.04.14+esm3 |
neuronUbuntu:20.04:LTS |
All versions, plus listed versions 7.6.3-1build27.6.3-1build37.6.3-1build4 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1 |
None known |
texmakerUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1 |
None known |
neuronUbuntu:22.04:LTS |
All versions, plus listed versions 7.6.3-1build57.6.3-1build6 |
None known |
tiffUbuntu:22.04:LTS |
before 4.3.0-6ubuntu0.13, plus listed versions 4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4 Show 14 moreShow less4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.44.3.0-6ubuntu0.54.3.0-6ubuntu0.64.3.0-6ubuntu0.74.3.0-6ubuntu0.84.3.0-6ubuntu0.94.3.0-6ubuntu0.104.3.0-6ubuntu0.114.3.0-6ubuntu0.12 |
4.3.0-6ubuntu0.13 |
qtwebengine-opensource-srcUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.0.3-1build85.0.3-1build95.0.3-1ubuntu0.22.04.1~esm1 |
None known |
tiffUbuntu:24.04:LTS |
before 4.5.1+git230720-4ubuntu2.5, plus listed versions 4.5.1+git230720-1ubuntu14.5.1+git230720-3ubuntu14.5.1+git230720-4ubuntu14.5.1+git230720-4ubuntu24.5.1+git230720-4ubuntu2.14.5.1+git230720-4ubuntu2.24.5.1+git230720-4ubuntu2.34.5.1+git230720-4ubuntu2.4 |
4.5.1+git230720-4ubuntu2.5 |
qtwebengine-opensource-srcUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.1.3+dfsg-1build45.1.3+dfsg-1build55.1.3+dfsg-1build65.1.3+dfsg-1build75.1.3+dfsg-1build85.1.3+dfsg-1ubuntu0.1~esm1 |
None known |
qtwebengine-opensource-srcUbuntu:25.10 |
All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1 |
None known |
texmakerUbuntu:25.10 |
All versions, plus listed versions 5.1.3+dfsg-35.1.3+dfsg-3build1 |
None known |
tiffUbuntu:25.10 |
before 4.7.0-3ubuntu3.1, plus listed versions 4.5.1+git230720-4ubuntu44.7.0-3ubuntu14.7.0-3ubuntu24.7.0-3ubuntu3 |
4.7.0-3ubuntu3.1 |
qtwebengine-opensource-srcUbuntu:26.10 |
All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7 |
None known |
tiffUbuntu:26.10 |
before 4.7.0-3ubuntu4 | 4.7.0-3ubuntu4 |
tiffUbuntu:26.04:LTS |
before 4.7.0-3ubuntu5, plus listed versions 4.7.0-3ubuntu34.7.0-3ubuntu4 |
4.7.0-3ubuntu5 |
qtwebengine-opensource-srcUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1 |
None known |
tiffUbuntu:26.04:LTS From an advisory covering 2 CVEs |
before 4.7.0-3ubuntu5, plus listed versions 4.7.0-3ubuntu34.7.0-3ubuntu4 |
4.7.0-3ubuntu5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-61143 is a medium vulnerability (CVSS 5.5) in Libtiff, published February 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.14%, the 3rd percentile. Fixed in libtiff 4.6.0-12.
References
gitlab.com/libtiff/libtiff/-/issues/737
gist.github.com/optionGo/9c024cd8e7b131463b84dc60af9bb0aa
nvd.nist.gov/vuln/detail/CVE-2025-61143
github.com/advisories/GHSA-p884-v7p5-5858
docs.bell-sw.com/security/cves/CVE-2025-61143
Show 47 moreShow less
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1773051259.html
security-tracker.debian.org/tracker/CVE-2025-61143
advisories.mageia.org/MGASA-2026-0105.html
bugs.mageia.org/show_bug.cgi?id=35268
ubuntu.com/security/notices/USN-8113-1
access.redhat.com/errata/RHSA-2026:7504
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7504.json
bugzilla.redhat.com/show_bug.cgi?id=2392784
cve.org/CVERecord?id=CVE-2025-9900
libtiff.gitlab.io/libtiff/releases/v4.7.1.html
suse.com/support/update/announcement/2026/suse-su-20261407-1
bugzilla.suse.com/1258798