CVE-2025-61144
libtiff up to v4.7.1 was discovered to contain a stack overflow via the...
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
CVE-2025-61144- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
CVE-2025-61144- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2025-207645
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
EUVD-2025-207645- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-m6xw-mq4p-x7xv
libtiff up to v4.7.1 was discovered to contain a stack overflow via the...
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
GHSA-m6xw-mq4p-x7xv- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVBELL-CVE-2025-61144
- Record
BELL-CVE-2025-61144- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
CVE-2025-61144- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSVDEBIAN-CVE-2025-61144
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
DEBIAN-CVE-2025-61144- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVJLSEC-2026-485
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
JLSEC-2026-485- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1441
libtiff security update
This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
A critical vulnerability was found in libtiff up to version 4.7.1 (Image Processing Software). The issue is classified as CWE-121 Stack-based Buffer Overflow. A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or function parameter). This vulnerability impacts confidentiality, integrity, and availability.(CVE-2025-61144)
- Record
OESA-2026-1441- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1442
libtiff security update
This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
A critical vulnerability was found in libtiff up to version 4.7.1 (Image Processing Software). The issue is classified as CWE-121 Stack-based Buffer Overflow. A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or function parameter). This vulnerability impacts confidentiality, integrity, and availability.(CVE-2025-61144)
- Record
OESA-2026-1442- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:7504
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:7504- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-61144
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
UBUNTU-CVE-2025-61144- CVSS 3.1
- 7.3 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-78311 No score
CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
AZL-78311- Updated
- 2026-11-05
OSVAZL-78330 No score
CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
- Record
AZL-78330- Updated
- 2026-11-02
OSVCLSA-2026-1772574874 No score
libtiff: Fix of CVE-2025-61144
- CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop
- Record
CLSA-2026-1772574874- Updated
- 2026-11-02
OSVCLSA-2026-1772575082 No score
libtiff: Fix of CVE-2025-61144
- CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop
- Record
CLSA-2026-1772575082- Updated
- 2026-11-02
OSVCLSA-2026-1772622084 No score
libtiff: Fix of CVE-2025-61144
- CVE-2025-61144: add MAX_SAMPLES bounds check in combineSeparateSamplesBytes to prevent stack-based buffer overflow when spp exceeds MAX_SAMPLES in tiffcrop
- Record
CLSA-2026-1772622084- Updated
- 2026-11-02
OSVMGASA-2026-0105 No score
Updated libtiff packages fix security vulnerabilities
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c. (CVE-2025-61143) libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. (CVE-2025-61144)
- Record
MGASA-2026-0105- Updated
- 2026-11-02
OSVROOT-OS-ALPINE-320-CVE-2025-61144 No score
CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available.
- Record
ROOT-OS-ALPINE-320-CVE-2025-61144- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-61144 No score
CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2025-61144- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-61144 No score
CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-61144- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-61144 No score
CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2025-61144- Updated
- 2026-11-02
OSVSUSE-SU-2026:1407-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).
- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
- Record
SUSE-SU-2026:1407-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1408-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).
- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).
- Record
SUSE-SU-2026:1408-1- Updated
- 2026-11-02
OSVUSN-8113-2 No score
tiff vulnerabilities
USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS.
Original advisory details:
It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143)
It was discovered that LibTIFF did not properly handle memory when processing malformed TIFF directories. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61144)
- Record
USN-8113-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtiffAzure Linux:3 |
before 4.6.0-12 | 4.6.0-12 |
libtiffAzure Linux:2 |
before 4.6.0-12 | 4.6.0-12 |
tiffAlpaquita:23 |
4.4.0-r1 up to 4.4.0-r6 | 4.4.0-r6 |
tiffAlpaquita:25 |
4.7.0-r0 up to 4.7.1-r0 | 4.7.1-r0 |
tiffAlpaquita:stream |
4.4.0-r1 up to 4.7.1-r0 | 4.7.1-r0 |
tiffBellSoft Hardened Containers:23 |
4.4.0-r1 up to 4.4.0-r6 | 4.4.0-r6 |
tiffBellSoft Hardened Containers:25 |
4.7.0-r0 up to 4.7.1-r0 | 4.7.1-r0 |
tiffBellSoft Hardened Containers:stream |
4.4.0-r1 up to 4.7.1-r0 | 4.7.1-r0 |
libtiffTuxCare:CentOS:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiff-develTuxCare:CentOS:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
Show 62 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libtiff-staticTuxCare:CentOS:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiff-toolsTuxCare:CentOS:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiffTuxCare:OracleLinux:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiff-develTuxCare:OracleLinux:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiff-staticTuxCare:OracleLinux:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiff-toolsTuxCare:OracleLinux:7 |
before 4.0.3-35.el7.tuxcare.els7 | 4.0.3-35.el7.tuxcare.els7 |
libtiffTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els7 | 4.4.0-8.el9_2.tuxcare.els7 |
libtiff-develTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els7 | 4.4.0-8.el9_2.tuxcare.els7 |
libtiff-staticTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els7 | 4.4.0-8.el9_2.tuxcare.els7 |
libtiff-toolsTuxCare:AlmaLinux:9.2 |
before 4.4.0-8.el9_2.tuxcare.els7 | 4.4.0-8.el9_2.tuxcare.els7 |
tiffDebian:12 |
All versions, plus listed versions 4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u34.5.0-6+deb12u4 Show 18 moreShow less4.5.1+git230720-14.5.1+git230720-24.5.1+git230720-34.5.1+git230720-44.5.1+git230720-54.5.1-14.5.1~rc3-14.6.0-14.6.0-24.7.0-14.7.0-24.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1 |
None known |
tiffDebian:13 |
All versions, plus listed versions 4.7.0-34.7.0-3+deb13u14.7.0-3+deb13u24.7.0-3+deb13u34.7.0-4 Show 5 moreShow less4.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1 |
None known |
tiffDebian:14 |
before 4.7.1-1, plus listed versions 4.7.0-34.7.0-44.7.0-5 |
4.7.1-1 |
Libtiff_jllJulia |
before 4.7.2+0 | 4.7.2+0 |
libtiffMageia:9 From an advisory covering 2 CVEs |
before 4.5.1-1.7.mga9 | 4.5.1-1.7.mga9 |
libtiffopenEuler:20.03-LTS-SP4 |
before 4.3.0-34.oe2003sp4 | 4.3.0-34.oe2003sp4 |
libtiffopenEuler:22.03-LTS-SP4 |
before 4.3.0-48.oe2203sp4 | 4.3.0-48.oe2203sp4 |
libtiffRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-develRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-staticRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
libtiff-toolsRed Hat:hummingbird:1 From an advisory covering 4 CVEs |
before 0:4.7.1-2.1.hum1 | 0:4.7.1-2.1.hum1 |
tiffRoot:Alpine:3.20 |
before 4.6.0t-r00071 | 4.6.0t-r000714.6.0t-r00072 |
rootio-tiffRoot:Alpine:3.20 |
before 4.6.0t-r00071 | 4.6.0t-r000714.6.0t-r00072 |
tiffRoot:Debian:11 |
before 4.2.0-1+deb11u8.aikido.17 | 4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20 |
rootio-tiffRoot:Debian:11 |
before 4.2.0-1+deb11u8.aikido.17 | 4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20 |
tiffRoot:Debian:12 |
before 4.5.0-6+deb12u4.aikido.20 | 4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22 |
rootio-tiffRoot:Debian:12 |
before 4.5.0-6+deb12u4.aikido.20 | 4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22 |
tiffRoot:Debian:13 |
before 4.7.0-3+deb13u3.aikido.8 | 4.7.0-3+deb13u3.aikido.84.7.0-3+deb13u3.aikido.94.7.0-3+deb13u3.aikido.74.7.0-3+deb13u3.aikido.10 |
rootio-tiffRoot:Debian:13 |
before 4.7.0-3+deb13u3.aikido.8 | 4.7.0-3+deb13u3.aikido.84.7.0-3+deb13u3.aikido.94.7.0-3+deb13u3.aikido.74.7.0-3+deb13u3.aikido.10 |
tiffSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 4.0.9-44.109.1 | 4.0.9-44.109.1 |
tiffSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
tiffSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 4.0.9-150000.45.63.1 | 4.0.9-150000.45.63.1 |
gdalUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.9.0-3.1ubuntu41.9.0-3.1ubuntu61.10.1+dfsg-21.10.1+dfsg-2build11.10.1+dfsg-3 Show 8 moreShow less1.10.1+dfsg-3build11.10.1+dfsg-3build21.10.1+dfsg-3ubuntu11.10.1+dfsg-3ubuntu21.10.1+dfsg-5ubuntu11.10.1+dfsg-5ubuntu1+esm11.10.1+dfsg-5ubuntu1+esm21.10.1+dfsg-5ubuntu1+esm3 |
None known |
tiffUbuntu:Pro:14.04:LTS |
before 4.0.3-7ubuntu0.11+esm17, plus listed versions 4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7 Show 26 moreShow less4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm84.0.3-7ubuntu0.11+esm94.0.3-7ubuntu0.11+esm104.0.3-7ubuntu0.11+esm114.0.3-7ubuntu0.11+esm124.0.3-7ubuntu0.11+esm134.0.3-7ubuntu0.11+esm144.0.3-7ubuntu0.11+esm154.0.3-7ubuntu0.11+esm16 |
4.0.3-7ubuntu0.11+esm17 |
tiffUbuntu:Pro:16.04:LTS |
before 4.0.6-1ubuntu0.8+esm20, plus listed versions 4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2 Show 24 moreShow less4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm114.0.6-1ubuntu0.8+esm124.0.6-1ubuntu0.8+esm134.0.6-1ubuntu0.8+esm144.0.6-1ubuntu0.8+esm154.0.6-1ubuntu0.8+esm164.0.6-1ubuntu0.8+esm174.0.6-1ubuntu0.8+esm184.0.6-1ubuntu0.8+esm19 |
4.0.6-1ubuntu0.8+esm20 |
gdalUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.11.2+dfsg-3ubuntu31.11.2+dfsg-3ubuntu41.11.3+dfsg-2build11.11.3+dfsg-2build21.11.3+dfsg-2build3 Show 5 moreShow less1.11.3+dfsg-31.11.3+dfsg-3build11.11.3+dfsg-3build21.11.3+dfsg-3ubuntu0.1~esm11.11.3+dfsg-3ubuntu0.1~esm2 |
None known |
tiffUbuntu:Pro:18.04:LTS |
before 4.0.9-5ubuntu0.10+esm10, plus listed versions 4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3 Show 22 moreShow less4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm14.0.9-5ubuntu0.10+esm24.0.9-5ubuntu0.10+esm34.0.9-5ubuntu0.10+esm44.0.9-5ubuntu0.10+esm54.0.9-5ubuntu0.10+esm64.0.9-5ubuntu0.10+esm74.0.9-5ubuntu0.10+esm84.0.9-5ubuntu0.10+esm9 |
4.0.9-5ubuntu0.10+esm10 |
neuronUbuntu:18.04:LTS |
All versions, plus listed versions 7.5-1 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1 |
None known |
texmakerUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1 |
None known |
tiffUbuntu:Pro:20.04:LTS |
before 4.1.0+git191117-2ubuntu0.20.04.14+esm3, plus listed versions 4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1 Show 15 moreShow less4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.84.1.0+git191117-2ubuntu0.20.04.94.1.0+git191117-2ubuntu0.20.04.104.1.0+git191117-2ubuntu0.20.04.114.1.0+git191117-2ubuntu0.20.04.124.1.0+git191117-2ubuntu0.20.04.134.1.0+git191117-2ubuntu0.20.04.144.1.0+git191117-2ubuntu0.20.04.14+esm14.1.0+git191117-2ubuntu0.20.04.14+esm2 |
4.1.0+git191117-2ubuntu0.20.04.14+esm3 |
neuronUbuntu:20.04:LTS |
All versions, plus listed versions 7.6.3-1build27.6.3-1build37.6.3-1build4 |
None known |
qtwebengine-opensource-srcUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7 Show 4 moreShow less5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1 |
None known |
texmakerUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1 |
None known |
neuronUbuntu:22.04:LTS |
All versions, plus listed versions 7.6.3-1build57.6.3-1build6 |
None known |
tiffUbuntu:22.04:LTS |
before 4.3.0-6ubuntu0.13, plus listed versions 4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4 Show 14 moreShow less4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.44.3.0-6ubuntu0.54.3.0-6ubuntu0.64.3.0-6ubuntu0.74.3.0-6ubuntu0.84.3.0-6ubuntu0.94.3.0-6ubuntu0.104.3.0-6ubuntu0.114.3.0-6ubuntu0.12 |
4.3.0-6ubuntu0.13 |
qtwebengine-opensource-srcUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build1 Show 4 moreShow less5.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-15.15.9+dfsg-1ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 5.0.3-1build85.0.3-1build95.0.3-1ubuntu0.22.04.1~esm1 |
None known |
tiffUbuntu:24.04:LTS |
before 4.5.1+git230720-4ubuntu2.5, plus listed versions 4.5.1+git230720-1ubuntu14.5.1+git230720-3ubuntu14.5.1+git230720-4ubuntu14.5.1+git230720-4ubuntu24.5.1+git230720-4ubuntu2.14.5.1+git230720-4ubuntu2.24.5.1+git230720-4ubuntu2.34.5.1+git230720-4ubuntu2.4 |
4.5.1+git230720-4ubuntu2.5 |
qtwebengine-opensource-srcUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.15.15+dfsg-25.15.15+dfsg-2build25.15.15+dfsg-2ubuntu15.15.16+dfsg-15.15.16+dfsg-1ubuntu25.15.16+dfsg-1ubuntu45.15.16+dfsg-35.15.16+dfsg-3ubuntu0.1~esm1 |
None known |
texmakerUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 5.1.3+dfsg-1build45.1.3+dfsg-1build55.1.3+dfsg-1build65.1.3+dfsg-1build75.1.3+dfsg-1build85.1.3+dfsg-1ubuntu0.1~esm1 |
None known |
qtwebengine-opensource-srcUbuntu:25.10 |
All versions, plus listed versions 5.15.18+dfsg-25.15.18+dfsg-2build15.15.19+dfsg-15.15.19+dfsg2-1 |
None known |
texmakerUbuntu:25.10 |
All versions, plus listed versions 5.1.3+dfsg-35.1.3+dfsg-3build1 |
None known |
tiffUbuntu:25.10 |
before 4.7.0-3ubuntu3.1, plus listed versions 4.5.1+git230720-4ubuntu44.7.0-3ubuntu14.7.0-3ubuntu24.7.0-3ubuntu3 |
4.7.0-3ubuntu3.1 |
qtwebengine-opensource-srcUbuntu:26.10 |
All versions, plus listed versions 5.15.19+dfsg2-45.15.19+dfsg2-65.15.19+dfsg2-7 |
None known |
tiffUbuntu:26.10 |
before 4.7.0-3ubuntu4 | 4.7.0-3ubuntu4 |
tiffUbuntu:26.04:LTS |
before 4.7.0-3ubuntu5, plus listed versions 4.7.0-3ubuntu34.7.0-3ubuntu4 |
4.7.0-3ubuntu5 |
qtwebengine-opensource-srcUbuntu:Pro:26.04:LTS |
All versions, plus listed versions 5.15.19+dfsg2-15.15.19+dfsg2-1build15.15.19+dfsg2-25.15.19+dfsg2-35.15.19+dfsg2-45.15.19+dfsg2-4ubuntu0.1~esm1 |
None known |
tiffUbuntu:26.04:LTS From an advisory covering 2 CVEs |
before 4.7.0-3ubuntu5, plus listed versions 4.7.0-3ubuntu34.7.0-3ubuntu4 |
4.7.0-3ubuntu5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-61144 is a high vulnerability (CVSS 7.3) in Libtiff, published February 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. Fixed in libtiff 4.6.0-12.
References
gitlab.com/libtiff/libtiff/-/issues/740
gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952
nvd.nist.gov/vuln/detail/CVE-2025-61144
Show 50 moreShow less
github.com/advisories/GHSA-m6xw-mq4p-x7xv
docs.bell-sw.com/security/cves/CVE-2025-61144
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1772574874.html
security-tracker.debian.org/tracker/CVE-2025-61144
advisories.mageia.org/MGASA-2026-0105.html
bugs.mageia.org/show_bug.cgi?id=35268
ubuntu.com/security/notices/USN-8113-1
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1441
access.redhat.com/errata/RHSA-2026:7504
images.redhat.com
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7504.json
bugzilla.redhat.com/show_bug.cgi?id=2392784
cve.org/CVERecord?id=CVE-2025-9900
libtiff.gitlab.io/libtiff/releases/v4.7.1.html
suse.com/support/update/announcement/2026/suse-su-20261407-1
bugzilla.suse.com/1258798