Summary
[4.0.3-35.0.1]
- fix CVE-2025-8176: prevent skipping first line in tiffdither and
tiffmedian tools [Orabug: 38658716]
- fix CVE-2025-8177: buffer overflow thumbnail setrow [Orabug: 38658716]
- fix CVE-2025-9900: buffer underflow crash in TIFFReadRGBAImageOriented()
[Orabug: 38658716]
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | libtiff | 0:4.0.3-35.0.1.el7 |
| Oracle Linux · 7 | libtiff-devel | 0:4.0.3-35.0.1.el7 |
| Oracle Linux · 7 | libtiff-static | 0:4.0.3-35.0.1.el7 |
| Oracle Linux · 7 | libtiff-tools | 0:4.0.3-35.0.1.el7 |
Vulnerabilities 3
-
High 8.8
Libtiff: libtiff write-what-where
A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the …
-
Medium 5.3
LibTIFF tiffmedian.c get_histogram use after free
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The …
-
Medium 5.3
LibTIFF thumbnail.c setrow buffer overflow
A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6…