Skip to content
OpenAdvisories
Critical DLA-880-1 7 CVEs

tiff3 - security update

Published Mar 30, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 tiff3 3.9.6-11+deb7u4

Vulnerabilities 7

  • Critical 9.8

    tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or …

  • Unscored —

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds write) via an invalid number of sampl…

  • Unscored —

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds writes) via a crafted TIFF image, a d…

  • Unscored —

    tif_luv.c in libtiff allows attackers to cause a denial of service (out-of-bounds reads) via a crafted TIFF image.

  • Unscored —

    The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds wr…

  • Unscored —

    tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 350…

  • Unscored —

    tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc an…