CVE-2025-8851

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

LibTIFF is a library for reading and writing TIFF (label image file format) files that are open source. This library contains some command-line tools for handling TIFF files. There is a security vulnerability in the 4.6.0 version of LibTIFF, which originates from the dereference of the null pointer of the function PS_Lvl2page in the file tools/tiff2ps.c.(CVE-2025-8534)

A vulnerability was found in LibTIFF up to 4.5.1 (Image Processing Software). It has been rated as critical.Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).Impacted is confidentiality, integrity, and availability.Applying the patch 8a7a48d7a645992ca83062b3a1873c951661e2b3 is able to eliminate this problem. The bugfix is ready for download at gitlab.com.(CVE-2025-8851)

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A vulnerability classified as problematic was found in libtiff 4.6.0 (Image Processing Software).The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.As an impact it is known to affect availability.It is possible to download the exploit at drive.google.com. It is declared as proof-of-concept. One of the maintainers explains, that "[t]his error only occurs if DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. "rD") option is used."Applying the patch 6ba36f159fd396ad11bf6b7874554197736ecc8b is able to eliminate this problem. The bugfix is ready for download at gitlab.com.(CVE-2025-8534)

A vulnerability was found in LibTIFF up to 4.5.1 (Image Processing Software). It has been rated as critical.Using CWE to declare the problem leads to CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).Impacted is confidentiality, integrity, and availability.Applying the patch 8a7a48d7a645992ca83062b3a1873c951661e2b3 is able to eliminate this problem. The bugfix is ready for download at gitlab.com.(CVE-2025-8851)

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A vulnerability was found in LibTIFF up to version 4.5.1. The issue affects the readSeparateStripsetoBuffer function in the tools/tiffcrop.c file of the tiffcrop component. The manipulation leads to a stack-based buffer overflow. Local access is required to exploit this vulnerability.(CVE-2025-8851)

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. The exploit has been published and may be used.(CVE-2025-9165)

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

• fix CVE-2025-8851 invalid strip-read and margin handling in tiffcrop

These are all security issues fixed in the tkimg-2.1.0-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libtiff-devel-32bit-4.7.1-3.1 package on the GA media of openSUSE Tumbleweed.

This update for tiff fixes the following issues

Security issues:

• CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
• CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

• QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).

Root has patched CVE-2025-8851 in the tiff package for Root:Debian:12. Multiple fixed versions available.

This update for tiff fixes the following issues:

Update to 4.7.1:

• CVE-2025-8851: Fixed stack-based buffer overflow (bsc#1248278).
• CVE-2025-9900: Fixed write-what-where via TIFFReadRGBAImageOriented (bsc#1250413).

This update for tiff fixes the following issues:

• CVE-2025-8851: Fixed stack-based buffer overflow vulnerability in tools/tiffcrop.c function readSeparateStripsIntoBuffer() by implementing additional error handling (bsc#1248278).

This update for tiff fixes the following issues

Security issues:

• CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
• CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

• QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).

This update for tiff fixes the following issues

Security issues:

• CVE-2025-8851: libtiff: LibTIFF Stack-based buffer overflow (bsc#1248278).
• CVE-2026-4775: signed integer overflow in the putcontig8bitYCbCr44tile function (bsc#1260411).

Non security issue:

• QGIS can't export with GDAL- LERC codec, LERC library not found anywhere in the system (bsc#1257123).

It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffmedian tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. (CVE-2025-8176)

It was discovered that LibTIFF did not properly perform bounds checking in certain operations when using thumbnail tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2025-8177)

It was discovered that LibTIFF incorrectly handled certain memory
operations when using tiff2ps tool. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. (CVE-2025-8534)

It was discovered that LibTIFF did not properly perform bounds checking
in certain operations when using tiffcrop tool. An attacker could trick
a user into processing a specially crafted tiff image file and
potentially use this issue to cause a denial of service. (CVE-2025-8851)