{"id":"CVE-2025-61144","aliases":["AZL-78311","AZL-78330","BELL-CVE-2025-61144","CLSA-2026-1772574874","CLSA-2026-1772575082","CLSA-2026-1772622084","DEBIAN-CVE-2025-61144","EUVD-2025-207645","GHSA-m6xw-mq4p-x7xv","JLSEC-2026-485","MGASA-2026-0105","OESA-2026-1441","OESA-2026-1442","RHSA-2026:7504","ROOT-OS-ALPINE-320-CVE-2025-61144","ROOT-OS-DEBIAN-11-CVE-2025-61144","ROOT-OS-DEBIAN-12-CVE-2025-61144","ROOT-OS-DEBIAN-13-CVE-2025-61144","SUSE-SU-2026:1407-1","SUSE-SU-2026:1408-1","UBUNTU-CVE-2025-61144","USN-8113-2"],"status":"published","title":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the...","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00303,"percentile":0.23415,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2026-02-23T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libtiff","fixed_in":["4.6.0-12"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.6.0-12"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"tiff","fixed_in":["4.4.0-r6"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"tiff","fixed_in":["4.4.0-r6"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-devel","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-static","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libtiff-tools","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-devel","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-static","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-tools","fixed_in":["4.0.3-35.el7.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","fixed_in":["4.4.0-8.el9_2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","fixed_in":["4.4.0-8.el9_2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","fixed_in":["4.4.0-8.el9_2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","fixed_in":["4.4.0-8.el9_2.tuxcare.els7"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.7.1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.7.2+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"libtiff","fixed_in":["4.3.0-34.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"libtiff","fixed_in":["4.3.0-48.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"tiff","fixed_in":["4.6.0t-r00071","4.6.0t-r00072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-tiff","fixed_in":["4.6.0t-r00071","4.6.0t-r00072"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"tiff","fixed_in":["4.7.0-3+deb13u3.aikido.8","4.7.0-3+deb13u3.aikido.9","4.7.0-3+deb13u3.aikido.7","4.7.0-3+deb13u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-tiff","fixed_in":["4.7.0-3+deb13u3.aikido.8","4.7.0-3+deb13u3.aikido.9","4.7.0-3+deb13u3.aikido.7","4.7.0-3+deb13u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm17"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm20"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.10+esm10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.14+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"tiff","fixed_in":["4.3.0-6ubuntu0.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"tiff","fixed_in":["4.5.1+git230720-4ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"tiff","fixed_in":["4.7.0-3ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"tiff","fixed_in":["4.7.0-3ubuntu4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"tiff","fixed_in":["4.7.0-3ubuntu5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-12"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.4.0-r6"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0-r0"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.4.0-r6"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0-r0"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-35.el7.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0-6","4.5.0-6+deb12u1","4.5.0-6+deb12u2","4.5.0-6+deb12u3","4.5.0-6+deb12u4","4.5.1+git230720-1","4.5.1+git230720-2","4.5.1+git230720-3","4.5.1+git230720-4","4.5.1+git230720-5","4.5.1-1","4.5.1~rc3-1","4.6.0-1","4.6.0-2","4.7.0-1","4.7.0-2","4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3","4.7.0-3+deb13u1","4.7.0-3+deb13u2","4.7.0-3+deb13u3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1-1"}]}],"versions":["4.7.0-3","4.7.0-4","4.7.0-5"]},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.7.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.7.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-34.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-48.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0t-r00071"},{"fixed":"4.6.0t-r00072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0t-r00071"},{"fixed":"4.6.0t-r00072"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3+deb13u3.aikido.8"},{"fixed":"4.7.0-3+deb13u3.aikido.9"},{"fixed":"4.7.0-3+deb13u3.aikido.7"},{"fixed":"4.7.0-3+deb13u3.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3+deb13u3.aikido.8"},{"fixed":"4.7.0-3+deb13u3.aikido.9"},{"fixed":"4.7.0-3+deb13u3.aikido.7"},{"fixed":"4.7.0-3+deb13u3.aikido.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.109.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.63.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0-3.1ubuntu4","1.9.0-3.1ubuntu6","1.10.1+dfsg-2","1.10.1+dfsg-2build1","1.10.1+dfsg-3","1.10.1+dfsg-3build1","1.10.1+dfsg-3build2","1.10.1+dfsg-3ubuntu1","1.10.1+dfsg-3ubuntu2","1.10.1+dfsg-5ubuntu1","1.10.1+dfsg-5ubuntu1+esm1","1.10.1+dfsg-5ubuntu1+esm2","1.10.1+dfsg-5ubuntu1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm17"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10","4.0.3-7ubuntu0.11+esm11","4.0.3-7ubuntu0.11+esm12","4.0.3-7ubuntu0.11+esm13","4.0.3-7ubuntu0.11+esm14","4.0.3-7ubuntu0.11+esm15","4.0.3-7ubuntu0.11+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm20"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13","4.0.6-1ubuntu0.8+esm14","4.0.6-1ubuntu0.8+esm15","4.0.6-1ubuntu0.8+esm16","4.0.6-1ubuntu0.8+esm17","4.0.6-1ubuntu0.8+esm18","4.0.6-1ubuntu0.8+esm19"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.2+dfsg-3ubuntu3","1.11.2+dfsg-3ubuntu4","1.11.3+dfsg-2build1","1.11.3+dfsg-2build2","1.11.3+dfsg-2build3","1.11.3+dfsg-3","1.11.3+dfsg-3build1","1.11.3+dfsg-3build2","1.11.3+dfsg-3ubuntu0.1~esm1","1.11.3+dfsg-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm10"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3","4.0.9-5ubuntu0.10+esm4","4.0.9-5ubuntu0.10+esm5","4.0.9-5ubuntu0.10+esm6","4.0.9-5ubuntu0.10+esm7","4.0.9-5ubuntu0.10+esm8","4.0.9-5ubuntu0.10+esm9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.5-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.14+esm3"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10","4.1.0+git191117-2ubuntu0.20.04.11","4.1.0+git191117-2ubuntu0.20.04.12","4.1.0+git191117-2ubuntu0.20.04.13","4.1.0+git191117-2ubuntu0.20.04.14","4.1.0+git191117-2ubuntu0.20.04.14+esm1","4.1.0+git191117-2ubuntu0.20.04.14+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.6.3-1build2","7.6.3-1build3","7.6.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.6.3-1build5","7.6.3-1build6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.13"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6","4.3.0-6ubuntu0.7","4.3.0-6ubuntu0.8","4.3.0-6ubuntu0.9","4.3.0-6ubuntu0.10","4.3.0-6ubuntu0.11","4.3.0-6ubuntu0.12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1+git230720-4ubuntu2.5"}]}],"versions":["4.5.1+git230720-1ubuntu1","4.5.1+git230720-3ubuntu1","4.5.1+git230720-4ubuntu1","4.5.1+git230720-4ubuntu2","4.5.1+git230720-4ubuntu2.1","4.5.1+git230720-4ubuntu2.2","4.5.1+git230720-4ubuntu2.3","4.5.1+git230720-4ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu3.1"}]}],"versions":["4.5.1+git230720-4ubuntu4","4.7.0-3ubuntu1","4.7.0-3ubuntu2","4.7.0-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu4"}]}]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu5"}]}],"versions":["4.7.0-3ubuntu3","4.7.0-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu5"}]}],"versions":["4.7.0-3ubuntu3","4.7.0-3ubuntu4"],"bundled":2}],"products":[{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"https://gitlab.com/libtiff/libtiff/-/issues/740","tags":["Exploit","Issue Tracking","report","web","article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/757","tags":["Issue Tracking","fix","web","article","report"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aa","tags":["Patch","fix","web","article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/09f53a86cf26dfd961925227e59e180db617f26d","tags":["Patch","fix","web","article"]},{"url":"https://gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952","tags":["Third Party Advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61144","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m6xw-mq4p-x7xv"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-61144","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1772574874.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1772575082.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1772622084.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61144.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-61144","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0105.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35268","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8113-1","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1441","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1442","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7504","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9900","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61145","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61143","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61144","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7504.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9900","tags":["advisory"]},{"url":"https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/704","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/732","tags":["article"]},{"url":"https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61143","tags":["advisory"]},{"url":"https://gist.github.com/optionGo/9c024cd8e7b131463b84dc60af9bb0aa","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/737","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/755","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61144","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61145","tags":["advisory"]},{"url":"https://gist.github.com/optionGo/062f109569196dbffd8ac12020b42289","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/736","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/753","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261407-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1258798","tags":["report"]},{"url":"https://bugzilla.suse.com/1258801","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61144","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261408-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-61144","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8113-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-61143","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-61144","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-02-25T14:27:56.707Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:32:45.105469Z"}],"euvd":[{"id":"EUVD-2025-207645","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-02-25T14:27:56Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:29.551855Z"}],"ghsa":[{"id":"GHSA-m6xw-mq4p-x7xv","title":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the...","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T21:31:26Z","modified":"2026-02-24T21:31:41Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:06:21.586241Z"}],"nvd":[{"id":"CVE-2025-61144","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T19:22:56.643Z","modified":"2026-06-17T09:50:21.72Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:12:01.096037Z"}],"osv":[{"id":"BELL-CVE-2025-61144","status":"published","published":"2026-02-26T06:09:18.8066Z","modified":"2026-09-06T07:15:18.731500432Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-61144","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-10-28T10:45:40.254335118Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-61144","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T19:22:56.643Z","modified":"2026-09-01T20:05:55.398141528Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"JLSEC-2026-485","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-05-07T18:17:01.111Z","modified":"2026-07-18T00:00:48.459804212Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"OESA-2026-1441","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\n\nSecurity Fix(es):\n\nA critical vulnerability was found in libtiff up to version 4.7.1 (Image Processing Software). The issue is classified as CWE-121 Stack-based Buffer Overflow. A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or function parameter). This vulnerability impacts confidentiality, integrity, and availability.(CVE-2025-61144)\n","status":"published","published":"2026-02-28T11:10:27Z","modified":"2026-08-18T01:19:40.314603224Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1442","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\n\nSecurity Fix(es):\n\nA critical vulnerability was found in libtiff up to version 4.7.1 (Image Processing Software). The issue is classified as CWE-121 Stack-based Buffer Overflow. A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or function parameter). This vulnerability impacts confidentiality, integrity, and availability.(CVE-2025-61144)\n","status":"published","published":"2026-02-28T11:10:27Z","modified":"2026-08-18T01:19:34.42696946Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"RHSA-2026:7504","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:57Z","modified":"2026-10-06T10:31:10.007482457Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2025-61144","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T19:22:00Z","modified":"2026-10-17T12:57:10.713415607Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-78311","title":"CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T19:22:56Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"AZL-78330","title":"CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12","description":"libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.","status":"published","published":"2026-02-23T19:22:56Z","modified":"2026-04-21T04:34:24.779418Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"CLSA-2026-1772574874","title":"libtiff: Fix of CVE-2025-61144","description":"- CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop","status":"published","published":"2026-03-04T17:31:55Z","modified":"2026-06-01T00:33:08.301187818Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772575082","title":"libtiff: Fix of CVE-2025-61144","description":"- CVE-2025-61144: fix stack-based buffer overflow occurs in tiffcrop","status":"published","published":"2026-03-03T21:58:07Z","modified":"2026-06-01T00:33:27.067691066Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1772622084","title":"libtiff: Fix of CVE-2025-61144","description":"- CVE-2025-61144: add MAX_SAMPLES bounds check in combineSeparateSamplesBytes to prevent\n  stack-based buffer overflow when spp exceeds MAX_SAMPLES in tiffcrop","status":"published","published":"2026-03-04T11:01:29Z","modified":"2026-06-01T00:31:56.602362238Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"MGASA-2026-0105","title":"Updated libtiff packages fix security vulnerabilities","description":"libtiff up to v4.7.1 was discovered to contain a NULL pointer\ndereference via the component libtiff/tif_open.c. (CVE-2025-61143)\nlibtiff up to v4.7.1 was discovered to contain a stack overflow via the\nreadSeparateStripsIntoBuffer function. (CVE-2025-61144)\n","status":"published","published":"2026-04-21T02:11:49Z","modified":"2026-04-21T02:15:11.58446Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2025-61144","title":"CVE-2025-61144 in tiff - Patched by Root","description":"Root has patched CVE-2025-61144 in the tiff package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T10:30:48Z","modified":"2026-09-29T11:15:04.978096697Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-61144","title":"CVE-2025-61144 in tiff - Patched by Root","description":"Root has patched CVE-2025-61144 in the tiff package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-02T13:00:50Z","modified":"2026-09-02T16:15:02.227476514Z","updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-61144","title":"CVE-2025-61144 in tiff - Patched by Root","description":"Root has patched CVE-2025-61144 in the tiff package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-02T12:45:33Z","modified":"2026-09-02T14:00:07.430451057Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-61144","title":"CVE-2025-61144 in tiff - Patched by Root","description":"Root has patched CVE-2025-61144 in the tiff package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-09-03T07:42:25Z","modified":"2026-09-03T09:15:03.147935836Z","updated_at":"2026-11-02T15:53:33.153539Z"},{"id":"SUSE-SU-2026:1407-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).\n- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).\n","status":"published","published":"2026-04-16T12:35:42Z","modified":"2026-04-17T09:00:27.472688Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1408-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2025-61143: Fixed NULL pointer dereference (bsc#1258798).\n- CVE-2025-61144: Fixed stack overflow in readSeparateStripsIntoBuffer() (bsc#1258801).\n","status":"published","published":"2026-04-16T12:36:07Z","modified":"2026-04-17T09:01:37.271823Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"USN-8113-2","title":"tiff vulnerabilities","description":"USN 8113-1 fixed vulnerabilities in tiff. This update\nprovides the corresponding fixes for Ubuntu 26.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that LibTIFF did not properly handle memory when\n processing certain images. An attacker could possibly use this issue to\n cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143)\n\n It was discovered that LibTIFF did not properly handle memory when\n processing malformed TIFF directories. An attacker could possibly use this\n issue to cause LibTIFF to crash, resulting in a denial of service.\n (CVE-2025-61144)","status":"published","published":"2026-08-19T07:39:43Z","modified":"2026-08-19T19:30:09.455576338Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}