{"id":"CVE-2018-12900","aliases":["ALPINE-CVE-2018-12900","BELL-CVE-2018-12900","DEBIAN-CVE-2018-12900","DLA-2009-1","DSA-4670-1","EUVD-2018-4853","GHSA-v933-8xv5-c5mm","MGASA-2018-0493","RHSA-2019:2053","RHSA-2019:3419","SUSE-SU-2018:3879-1","SUSE-SU-2018:3911-1","SUSE-SU-2018:3911-2","SUSE-SU-2018:3925-1","UBUNTU-CVE-2018-12900","USN-3906-1","openSUSE-SU-2024:11461-1"],"status":"published","title":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3,...","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.2483,"percentile":0.97918,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2018-06-26T00:00:00Z","modified":"2026-10-24T10:30:39Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"tiff","fixed_in":["4.0.10-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tiff","fixed_in":["4.0.10-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.0.10-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.0.10-4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","fixed_in":["0:4.0.9-15.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10-4"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-12.3+deb8u10"}]}],"versions":["4.0.3-12.3","4.0.3-12.3+deb8u1","4.0.3-12.3+deb8u2","4.0.3-12.3+deb8u3","4.0.3-12.3+deb8u4","4.0.3-12.3+deb8u5","4.0.3-12.3+deb8u6","4.0.3-12.3+deb8u7","4.0.3-12.3+deb8u8","4.0.3-12.3+deb8u9"],"bundled":5},{"source":"osv","ecosystem":"Debian:9","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.8-2+deb9u5"}]}],"versions":["4.0.8-2","4.0.8-2+deb9u1","4.0.8-2+deb9u2","4.0.8-2+deb9u3","4.0.8-2+deb9u4"],"bundled":7},{"source":"osv","ecosystem":"Mageia:6","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-1.9.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.3-32.el7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-15.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-141.169.22.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-141.169.22.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-141.169.22.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.27.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5.17.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.6"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.2"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.6"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.2"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-1.3"}]}],"bundled":48}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"http://bugzilla.maptools.org/show_bug.cgi?id=2798","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://usn.ubuntu.com/3906-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3906-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2053","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3419","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00027.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://www.debian.org/security/2020/dsa-4670","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2018-12900","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12900","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-v933-8xv5-c5mm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-12900","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-12900","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-12900","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0493.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24053","tags":["report"]},{"url":"https://www.debian.org/security/2018/dsa-4349","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-11/msg00138.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-12/msg00038.html","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1556708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1559704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1577311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1579058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1595575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1644448","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2053.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3186","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3186","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3186","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-7456","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-7456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7456","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-8905","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8905","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8905","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10779","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-10963","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10963","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12900","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12900","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17100","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17101","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18557","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-18661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-18661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-18661","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.1_release_notes/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3419.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183879-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1010163","tags":["report"]},{"url":"https://bugzilla.suse.com/1014461","tags":["report"]},{"url":"https://bugzilla.suse.com/1040080","tags":["report"]},{"url":"https://bugzilla.suse.com/1040322","tags":["report"]},{"url":"https://bugzilla.suse.com/1074186","tags":["report"]},{"url":"https://bugzilla.suse.com/1099257","tags":["report"]},{"url":"https://bugzilla.suse.com/1113672","tags":["report"]},{"url":"https://bugzilla.suse.com/974446","tags":["report"]},{"url":"https://bugzilla.suse.com/974447","tags":["report"]},{"url":"https://bugzilla.suse.com/974448","tags":["report"]},{"url":"https://bugzilla.suse.com/983440","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18661","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183911-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1113094","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18557","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183911-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183925-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-12900","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3906-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3906-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10779","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17000","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-6128","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7663","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-2327","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9935","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9936","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7663","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:00:00Z","modified":"2024-08-05T08:45:02.541Z","updated_at":"2026-11-02T14:35:06.320867Z"}],"euvd":[{"id":"EUVD-2018-4853","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:00:00Z","modified":"2024-08-05T08:45:02Z","updated_at":"2026-11-03T02:39:51.651517Z"}],"ghsa":[{"id":"GHSA-v933-8xv5-c5mm","title":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3,...","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2022-05-13T01:11:29Z","modified":"2023-02-01T05:03:42Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:06.238998Z"}],"nvd":[{"id":"CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:29:00.257Z","modified":"2026-06-17T01:38:32.473Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:30.900603Z"}],"osv":[{"id":"ALPINE-CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:29:00.257Z","modified":"2026-10-23T17:17:55.210610146Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-12900","title":"CVE-2018-12900 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:38.486431Z","modified":"2026-09-06T07:15:09.462627012Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:29:00.257Z","modified":"2026-10-24T10:30:39.993261062Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.934182Z"},{"id":"DEBIAN-CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T22:29:00.257Z","modified":"2026-10-23T18:03:53.988190801Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"RHSA-2019:2053","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T01:58:38Z","modified":"2026-06-27T10:07:46Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3419","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T01:58:44Z","modified":"2026-06-26T12:21:57.325998678Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"UBUNTU-CVE-2018-12900","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","status":"published","published":"2018-06-26T00:00:00Z","modified":"2026-04-22T11:35:41.392753Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"DLA-2009-1","title":"tiff - security update","status":"published","published":"2019-11-26T00:00:00Z","modified":"2026-03-09T01:20:15.477473Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4670-1","title":"tiff - security update","status":"published","published":"2020-04-29T00:00:00Z","modified":"2026-03-09T02:09:57.878036Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2018-0493","title":"Updated libtiff packages fix security vulnerabilities","description":"Heap-based buffer overflow in the cpSeparateBufToContigBuf function in\ntiffcp.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of\nservice (crash) or possibly have unspecified other impact via a crafted\nTIFF file. (CVE-2018-12900)\n\nLibTIFF 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a\nbuffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode\nout-of-bounds write. (CVE-2018-18557)\n\nIn LibTIFF 4.0.9, there is a NULL pointer dereference in the\nTIFFWriteDirectorySec function in tif_dirwrite.c that will lead to a\ndenial of service attack, as demonstrated by tiffset. (CVE-2018-19210)\n","status":"published","published":"2018-12-29T23:24:32Z","modified":"2026-04-16T06:26:26.972673333Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11461-1","title":"libtiff-devel-32bit-4.3.0-1.3 on GA media","description":"These are all security issues fixed in the libtiff-devel-32bit-4.3.0-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:53.504228Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:3879-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).\n- CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).\n- CVE-2017-9147: Fixed invalid read in the _TIFFVGetField function in tif_dir.c, that allowed remote attackers to cause a DoS via acrafted TIFF file (bsc#1040322). \n- CVE-2017-9117: Fixed BMP images processing that was verified without biWidth and biHeight values (bsc#1040080).\n- CVE-2017-17942: Fixed issue in the function PackBitsEncode that could have led to a heap overflow and caused a DoS (bsc#1074186).\n- CVE-2016-9273: Fixed heap-based buffer overflow issue (bsc#1010163).\n- CVE-2016-5319: Fixed heap-based buffer overflow in PackBitsEncode (bsc#983440).\n- CVE-2016-3621: Fixed out-of-bounds read in the bmp2tiff tool (lzw packing) (bsc#974448).\n- CVE-2016-3620: Fixed out-of-bounds read in the bmp2tiff tool (zip packing) (bsc#974447)\n- CVE-2016-3619: Fixed out-of-bounds read in the bmp2tiff tool (none packing) (bsc#974446)\n- CVE-2015-8870: Fixed integer overflow in tools/bmp2tiff.c that allowed remote attackers to causea DOS (bsc#1014461).\n\nNon-security issues fixed:\n\n- asan_build: build ASAN included\n- debug_build: build more suitable for debugging\n","status":"published","published":"2018-11-23T16:06:18Z","modified":"2025-05-02T04:04:53.412599Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3911-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).                                                                                             \n- CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).                                                                               \n- CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write (bsc#1113094).\n\nNon-security issues fixed:\n\n- asan_build: build ASAN included\n- debug_build: build more suitable for debugging\n","status":"published","published":"2018-11-26T16:47:06Z","modified":"2026-02-04T04:36:47.841994Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3911-2","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).                                                                                             \n- CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).                                                                               \n- CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write (bsc#1113094).\n\nNon-security issues fixed:\n\n- asan_build: build ASAN included\n- debug_build: build more suitable for debugging\n","status":"published","published":"2018-12-06T13:03:37Z","modified":"2026-02-04T03:26:10.241744Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:3925-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12900: Fixed heap-based buffer overflow in the cpSeparateBufToContigBuf (bsc#1099257).\n- CVE-2018-18661: Fixed NULL pointer dereference in the function LZWDecode in the file tif_lzw.c (bsc#1113672).\n- CVE-2018-18557: Fixed JBIG decode can lead to out-of-bounds write (bsc#1113094).\n\nNon-security issues fixed:\n\n- asan_build: build ASAN included\n- debug_build: build more suitable for debugging\n","status":"published","published":"2018-11-27T12:38:56Z","modified":"2026-02-04T03:31:51.495639Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"USN-3906-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a specially\ncrafted image, a remote attacker could crash the application, leading to a\ndenial of service, or possibly execute arbitrary code with user privileges.\n","status":"published","published":"2019-03-12T13:08:54Z","modified":"2026-04-27T15:33:02.108326791Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}