{"id":"CVE-2025-61145","aliases":["AZL-78314","AZL-78333","BELL-CVE-2025-61145","CLSA-2026-1772642268","CLSA-2026-1773829377","DEBIAN-CVE-2025-61145","EUVD-2025-207644","GHSA-5jj2-qhxw-rpq6","JLSEC-2026-486","RHSA-2026:7504","ROOT-OS-DEBIAN-11-CVE-2025-61145","ROOT-OS-DEBIAN-12-CVE-2025-61145","ROOT-OS-DEBIAN-13-CVE-2025-61145","UBUNTU-CVE-2025-61145"],"status":"published","title":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","severity":{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00157,"percentile":0.04969,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2026-02-23T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libtiff","fixed_in":["4.6.0-11"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.6.0-11"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"tiff","fixed_in":["4.4.0-r5"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"tiff","fixed_in":["4.4.0-r5"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","fixed_in":["4.7.1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-devel","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-static","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-tools","fixed_in":["4.4.0-13.el9_6.2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","fixed_in":["4.4.0-8.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","fixed_in":["4.4.0-8.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","fixed_in":["4.4.0-8.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","fixed_in":["4.4.0-8.el9_2.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.7.1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.7.2+0"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-tiff","fixed_in":["4.5.0-6+deb12u4.aikido.20","4.5.0-6+deb12u4.root.io.19","4.5.0-6+deb12u4.aikido.21","4.5.0-6+deb12u4.aikido.22"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"tiff","fixed_in":["4.7.0-3+deb13u3.aikido.8","4.7.0-3+deb13u3.aikido.9","4.7.0-3+deb13u3.aikido.7","4.7.0-3+deb13u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Root:Debian:13","package":"rootio-tiff","fixed_in":["4.7.0-3+deb13u3.aikido.8","4.7.0-3+deb13u3.aikido.9","4.7.0-3+deb13u3.aikido.7","4.7.0-3+deb13u3.aikido.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm16"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm19"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.10+esm9"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.14+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"tiff","fixed_in":["4.3.0-6ubuntu0.12"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"tiff","fixed_in":["4.5.1+git230720-4ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"tiff","fixed_in":["4.7.0-3ubuntu3"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"tiff","fixed_in":["4.7.0-3ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-11"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.4.0-r5"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0-r0"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.4.0-r5"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.7.0-r0"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"},{"fixed":"4.7.1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-13.el9_6.2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0-6","4.5.0-6+deb12u1","4.5.0-6+deb12u2","4.5.0-6+deb12u3","4.5.0-6+deb12u4","4.5.1+git230720-1","4.5.1+git230720-2","4.5.1+git230720-3","4.5.1+git230720-4","4.5.1+git230720-5","4.5.1-1","4.5.1~rc3-1","4.6.0-1","4.6.0-2","4.7.0-1","4.7.0-2","4.7.0-3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.7.0-3","4.7.0-3+deb13u1","4.7.0-3+deb13u2","4.7.0-3+deb13u3","4.7.0-4","4.7.0-5","4.7.1-1","4.7.1-2","4.7.1-3","4.7.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.1-1"}]}],"versions":["4.7.0-3","4.7.0-4","4.7.0-5"]},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.7.2+0"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Root:Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u4.aikido.20"},{"fixed":"4.5.0-6+deb12u4.root.io.19"},{"fixed":"4.5.0-6+deb12u4.aikido.21"},{"fixed":"4.5.0-6+deb12u4.aikido.22"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3+deb13u3.aikido.8"},{"fixed":"4.7.0-3+deb13u3.aikido.9"},{"fixed":"4.7.0-3+deb13u3.aikido.7"},{"fixed":"4.7.0-3+deb13u3.aikido.10"}]}]},{"source":"osv","ecosystem":"Root:Debian:13","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3+deb13u3.aikido.8"},{"fixed":"4.7.0-3+deb13u3.aikido.9"},{"fixed":"4.7.0-3+deb13u3.aikido.7"},{"fixed":"4.7.0-3+deb13u3.aikido.10"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.0-3.1ubuntu4","1.9.0-3.1ubuntu6","1.10.1+dfsg-2","1.10.1+dfsg-2build1","1.10.1+dfsg-3","1.10.1+dfsg-3build1","1.10.1+dfsg-3build2","1.10.1+dfsg-3ubuntu1","1.10.1+dfsg-3ubuntu2","1.10.1+dfsg-5ubuntu1","1.10.1+dfsg-5ubuntu1+esm1","1.10.1+dfsg-5ubuntu1+esm2","1.10.1+dfsg-5ubuntu1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm16"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10","4.0.3-7ubuntu0.11+esm11","4.0.3-7ubuntu0.11+esm12","4.0.3-7ubuntu0.11+esm13","4.0.3-7ubuntu0.11+esm14","4.0.3-7ubuntu0.11+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm19"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13","4.0.6-1ubuntu0.8+esm14","4.0.6-1ubuntu0.8+esm15","4.0.6-1ubuntu0.8+esm16","4.0.6-1ubuntu0.8+esm17","4.0.6-1ubuntu0.8+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.2+dfsg-3ubuntu3","1.11.2+dfsg-3ubuntu4","1.11.3+dfsg-2build1","1.11.3+dfsg-2build2","1.11.3+dfsg-2build3","1.11.3+dfsg-3","1.11.3+dfsg-3build1","1.11.3+dfsg-3build2","1.11.3+dfsg-3ubuntu0.1~esm1","1.11.3+dfsg-3ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm9"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3","4.0.9-5ubuntu0.10+esm4","4.0.9-5ubuntu0.10+esm5","4.0.9-5ubuntu0.10+esm6","4.0.9-5ubuntu0.10+esm7","4.0.9-5ubuntu0.10+esm8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.5-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-4","5.9.1+dfsg-4ubuntu1","5.9.2+dfsg-2ubuntu1","5.9.3+dfsg-0ubuntu1","5.9.4+dfsg-0ubuntu1","5.9.5+dfsg-0ubuntu2","5.9.5+dfsg-0ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5-1","5.0.2-1","5.0.2-1build1","5.0.2-1build2","5.0.2-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.14+esm2"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10","4.1.0+git191117-2ubuntu0.20.04.11","4.1.0+git191117-2ubuntu0.20.04.12","4.1.0+git191117-2ubuntu0.20.04.13","4.1.0+git191117-2ubuntu0.20.04.14","4.1.0+git191117-2ubuntu0.20.04.14+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.6.3-1build2","7.6.3-1build3","7.6.3-1build4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.12.4+dfsg-1ubuntu1","5.12.4+dfsg-1ubuntu3","5.12.5+dfsg-3ubuntu1","5.12.5+dfsg-6ubuntu2","5.12.5+dfsg-7","5.12.5+dfsg-7build1","5.12.8+dfsg-0ubuntu1","5.12.8+dfsg-0ubuntu1.1","5.12.8+dfsg-0ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build2","5.0.3-1build3","5.0.3-1build4","5.0.3-1build5","5.0.3-1ubuntu0.20.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"neuron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.6.3-1build5","7.6.3-1build6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.12"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6","4.3.0-6ubuntu0.7","4.3.0-6ubuntu0.8","4.3.0-6ubuntu0.9","4.3.0-6ubuntu0.10","4.3.0-6ubuntu0.11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.6+dfsg-1","5.15.6+dfsg-2","5.15.7+dfsg-2","5.15.8+dfsg-1","5.15.8+dfsg-1build1","5.15.8+dfsg-1build2","5.15.8+dfsg-2","5.15.9+dfsg-1","5.15.9+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.3-1build8","5.0.3-1build9","5.0.3-1ubuntu0.22.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1+git230720-4ubuntu2.4"}]}],"versions":["4.5.1+git230720-1ubuntu1","4.5.1+git230720-3ubuntu1","4.5.1+git230720-4ubuntu1","4.5.1+git230720-4ubuntu2","4.5.1+git230720-4ubuntu2.1","4.5.1+git230720-4ubuntu2.2","4.5.1+git230720-4ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.15+dfsg-2","5.15.15+dfsg-2build2","5.15.15+dfsg-2ubuntu1","5.15.16+dfsg-1","5.15.16+dfsg-1ubuntu2","5.15.16+dfsg-1ubuntu4","5.15.16+dfsg-3","5.15.16+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-1build4","5.1.3+dfsg-1build5","5.1.3+dfsg-1build6","5.1.3+dfsg-1build7","5.1.3+dfsg-1build8","5.1.3+dfsg-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.18+dfsg-2","5.15.18+dfsg-2build1","5.15.19+dfsg-1","5.15.19+dfsg2-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"texmaker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.3+dfsg-3","5.1.3+dfsg-3build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu3"}]}],"versions":["4.5.1+git230720-4ubuntu4","4.7.0-3ubuntu1","4.7.0-3ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-4","5.15.19+dfsg2-6","5.15.19+dfsg2-7"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0-3ubuntu3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"qtwebengine-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.15.19+dfsg2-1","5.15.19+dfsg2-1build1","5.15.19+dfsg2-2","5.15.19+dfsg2-3","5.15.19+dfsg2-4","5.15.19+dfsg2-4ubuntu0.1~esm1"]}],"products":[{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"https://gitlab.com/libtiff/libtiff/-/issues/736","tags":["Exploit","Issue Tracking","report","web","article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/753","tags":["Issue Tracking","fix","web","article","report"]},{"url":"https://gist.github.com/optionGo/062f109569196dbffd8ac12020b42289","tags":["Third Party Advisory","web","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61145","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-5jj2-qhxw-rpq6"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-61145","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1772642268.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-8961","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1773829377.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61145.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-61145","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:7504","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-9900","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61145","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61143","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-61144","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7504.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9900","tags":["advisory"]},{"url":"https://github.com/SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where?tab=readme-ov-file","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/704","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/732","tags":["article"]},{"url":"https://libtiff.gitlab.io/libtiff/releases/v4.7.1.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61143","tags":["advisory"]},{"url":"https://gist.github.com/optionGo/9c024cd8e7b131463b84dc60af9bb0aa","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/737","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/755","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441977","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61144","tags":["advisory"]},{"url":"https://gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/09f53a86cf26dfd961925227e59e180db617f26d","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aa","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/740","tags":["article"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/757","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2441975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-61145","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2025-61145","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-61145","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-02-25T14:30:23.881Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:32:44.763463Z"}],"euvd":[{"id":"EUVD-2025-207644","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-02-25T14:30:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:29.551855Z"}],"ghsa":[{"id":"GHSA-5jj2-qhxw-rpq6","title":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T21:31:26Z","modified":"2026-02-24T21:31:41Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:06:21.586241Z"}],"nvd":[{"id":"CVE-2025-61145","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T19:22:56.757Z","modified":"2026-06-17T09:50:21.877Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:12:01.096037Z"}],"osv":[{"id":"BELL-CVE-2025-61145","status":"published","published":"2026-02-26T06:09:18.870811Z","modified":"2026-09-06T07:15:18.765935893Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-61145","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T00:00:00Z","modified":"2026-10-28T02:30:30.408176722Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:51.516975Z"},{"id":"DEBIAN-CVE-2025-61145","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T19:22:56.757Z","modified":"2026-09-01T20:05:55.333818607Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"JLSEC-2026-486","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component `tools/tiffcrop.c`.","status":"published","published":"2026-05-07T18:17:01.111Z","modified":"2026-07-25T18:24:30.646893541Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:18.573531Z"},{"id":"RHSA-2026:7504","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-21T10:09:57Z","modified":"2026-10-06T10:31:10.007482457Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"UBUNTU-CVE-2025-61145","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T19:22:00Z","modified":"2026-10-17T12:57:10.948486089Z","cvss":[{"version":"3.1","score":5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.817402Z"},{"id":"AZL-78314","title":"CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T19:22:56Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.626116Z"},{"id":"AZL-78333","title":"CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11","description":"libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.","status":"published","published":"2026-02-23T19:22:56Z","modified":"2026-04-21T04:34:24.830318Z","updated_at":"2026-11-02T15:28:09.747541Z"},{"id":"CLSA-2026-1772642268","title":"libtiff: Fix of 3 CVEs","description":"- CVE-2025-61145: fix double free in tiffcrop; add pointer validation\n  and guard against second free.","status":"published","published":"2026-07-30T18:39:54Z","modified":"2026-10-26T09:30:59.853539567Z","updated_at":"2026-11-02T15:43:43.249928Z"},{"id":"CLSA-2026-1773829377","title":"libtiff: Fix of CVE-2025-61145","description":"- CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling\n  pointer in loadImage by clearing *read_ptr after free","status":"published","published":"2026-03-18T10:23:01Z","modified":"2026-06-01T00:32:07.929438615Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2025-61145","title":"CVE-2025-61145 in tiff - Patched by Root","description":"Root has patched CVE-2025-61145 in the tiff package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-02T13:00:50Z","modified":"2026-09-02T16:15:02.238539533Z","updated_at":"2026-11-02T15:53:29.631993Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2025-61145","title":"CVE-2025-61145 in tiff - Patched by Root","description":"Root has patched CVE-2025-61145 in the tiff package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-02T12:45:33Z","modified":"2026-09-02T14:00:10.746352414Z","updated_at":"2026-11-02T15:53:31.514195Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2025-61145","title":"CVE-2025-61145 in tiff - Patched by Root","description":"Root has patched CVE-2025-61145 in the tiff package for Root:Debian:13. Multiple fixed versions available.","status":"published","published":"2026-09-03T07:42:25Z","modified":"2026-09-03T09:15:02.083335964Z","updated_at":"2026-11-02T15:53:33.153539Z"}]}}