Every CVE Search/ Get API key

CVE-2016-5319

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers...

6.5 MediumFix available

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.71%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
CVE-2016-5319
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
CVE-2016-5319
Updated
2026-11-02
EUVDEUVD-2016-6270 No score

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
EUVD-2016-6270
Updated
2026-11-03
GitHub AdvisoriesGHSA-qxv5-8384-wvg6 6.5

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers...

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
GHSA-qxv5-8384-wvg6
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 6.5

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
CVE-2016-5319
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-5319 6.5

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
DEBIAN-CVE-2016-5319
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2016-5319 6.5

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Record
UBUNTU-CVE-2016-5319
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2018-0409 No score

Updated libtiff packages fix security vulnerabilities

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file (CVE-2016-5319).

In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c (CVE-2017-17942).

TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff (CVE-2018-10779).

Record
MGASA-2018-0409
Updated
2026-11-02
OSVSUSE-SU-2018:2676-1 No score

Security update for tiff

This update for tiff fixes the following issues:

The following security vulnerabilities were addressed:

  • CVE-2015-8668: Fixed a heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff, which allowed remote attackers to execute arbitrary code or cause a denial of service via a large width field in a specially crafted BMP image. (bsc#960589)
  • CVE-2018-10779: Fixed a heap-based buffer over-read in TIFFWriteScanline() in tif_write.c (bsc#1092480)
  • CVE-2017-17942: Fixed a heap-based buffer overflow in the function PackBitsEncode in tif_packbits.c. (bsc#1074186)
  • CVE-2016-5319: Fixed a beap-based buffer overflow in bmp2tiff (bsc#983440)
Record
SUSE-SU-2018:2676-1
Updated
2026-11-02
OSVSUSE-SU-2018:2836-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Security issues fixed:

  • CVE-2018-10779: Fixed a heap-based buffer overflow in TIFFWriteScanline() in tif_write.c (bsc#1092480)
  • CVE-2017-17942: Fixed a heap-based buffer overflow in the function PackBitsEncode in tif_packbits.c. (bsc#1074186)
  • CVE-2016-5319: Fixed a beap-based buffer overflow in bmp2tiff (bsc#983440)
Record
SUSE-SU-2018:2836-1
Updated
2026-11-02
OSVSUSE-SU-2018:3879-1 No score

Security update for tiff

This update for tiff fixes the following issues:

Security issues fixed:

  • CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).
  • CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).
  • CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322).
  • CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080).
  • CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186).
  • CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163).
  • CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440).
  • CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448).
  • CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447)
  • CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446)
  • CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461).

Non-security issues fixed:

  • asan_build: build ASAN included
  • debug_build: build more suitable for debugging
Record
SUSE-SU-2018:3879-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 4.0.6-3
4.0.6-3
tiff
Debian:13
 before 4.0.6-3
4.0.6-3
tiff
Debian:14
 before 4.0.6-3
4.0.6-3
tiff
Debian:7
 before 4.0.2-6+deb7u7, plus listed versions
4.0.2-64.0.2-6+deb7u14.0.2-6+deb7u24.0.2-6+deb7u34.0.2-6+deb7u44.0.2-6+deb7u54.0.2-6+deb7u6
4.0.2-6+deb7u7
libtiff
Mageia:6
 before 4.0.9-1.6.mga6
4.0.9-1.6.mga6
tiff
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 3.8.2-141.169.16.1
3.8.2-141.169.16.1
tiff
SUSE:Linux Enterprise Server 11 SP4
 before 3.8.2-141.169.16.1
3.8.2-141.169.16.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.8.2-141.169.16.1
3.8.2-141.169.16.1
tiff
SUSE:Linux Enterprise Desktop 12 SP3
 before 4.0.9-44.21.1
4.0.9-44.21.1
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 4.0.9-44.21.1
4.0.9-44.21.1
Show 5 moreShow less
Affected packages
PackageAffectedFixed
tiff
SUSE:Linux Enterprise Server 12 SP3
 before 4.0.9-44.21.1
4.0.9-44.21.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 4.0.9-44.21.1
4.0.9-44.21.1
tiff
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 3.8.2-141.169.22.1
3.8.2-141.169.22.1
tiff
SUSE:Linux Enterprise Server 11 SP4
 before 3.8.2-141.169.22.1
3.8.2-141.169.22.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.8.2-141.169.22.1
3.8.2-141.169.22.1

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-5319 is a medium vulnerability (CVSS 6.5) in Libtiff, published November 2, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.71%, the 89th percentile. Fixed in tiff 4.0.6-3.

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open