Summary
[4.4.0-13.2]
- fix CVE-2025-8176 off-by-one error skipping first line in tiffdither
and tiffmedian
- Resolves: RHEL-120243
[4.4.0-13.1]
- fix CVE-2025-9900 buffer underflow in TIFFReadRGBAImageOriented
- Resolves: RHEL-112542
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libtiff | 0:4.4.0-13.el9_6.2 |
| Oracle Linux · 9 | libtiff-devel | 0:4.4.0-13.el9_6.2 |
| Oracle Linux · 9 | libtiff-tools | 0:4.4.0-13.el9_6.2 |
Vulnerabilities 2
-
High 8.8
Libtiff: libtiff write-what-where
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the …
-
Medium 5.3
LibTIFF tiffmedian.c get_histogram use after free
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …