libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 3

• Critical 9.8
  CVE-2025-61144

  libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

  tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  Feb 23, 2026
• Medium 5.5
  CVE-2025-61143

  libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

  tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  Feb 23, 2026
• Medium 5.5
  CVE-2025-61145

  libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

  tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux
  Feb 23, 2026

Revision history

1. 2026-09-03 #7

   Neue Updates von Dell aufgenommen

2. 2026-08-19 #6

   Neue Updates von Ubuntu aufgenommen

3. 2026-04-16 #5

   Neue Updates von SUSE aufgenommen

4. 2026-03-23 #4

   Neue Updates von Ubuntu aufgenommen

5. 2026-03-19 #3

   Neue Updates von Amazon aufgenommen

6. 2026-02-24 #2

   Referenz(en) aufgenommen: EUVD-2025-207645, EUVD-2025-207646, EUVD-2025-207644

7. 2026-02-23 #1

   Initiale Fassung

References

• Red Hat Bugtracker vom 2026-02-23
  https://bugzilla.redhat.com/show_bug.cgi?id=2441978
• Red Hat Bugtracker vom 2026-02-23
  https://bugzilla.redhat.com/show_bug.cgi?id=2441977
• Red Hat Bugtracker vom 2026-02-23
  https://bugzilla.redhat.com/show_bug.cgi?id=2441975
• RedHat Customer Portal vom 2026-02-23
  https://access.redhat.com/security/cve/cve-2025-61143
• RedHat Customer Portal vom 2026-02-23
  https://access.redhat.com/security/cve/cve-2025-61144
• RedHat Customer Portal vom 2026-02-23
  https://access.redhat.com/security/cve/cve-2025-61145
• Amazon Linux Security Advisory ALAS2-2026-3194 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3194.html
• Amazon Linux Security Advisory ALAS2-2026-3195 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3195.html
• Amazon Linux Security Advisory ALAS2-2026-3196 vom 2026-03-19
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3196.html
• Ubuntu Security Notice USN-8113-1 vom 2026-03-23
  https://ubuntu.com/security/notices/USN-8113-1
• SUSE Security Update SUSE-SU-2026:1408-1 vom 2026-04-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025404.html
• SUSE Security Update SUSE-SU-2026:1407-1 vom 2026-04-16
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025405.html
• Ubuntu Security Notice USN-8113-2 vom 2026-08-19
  https://ubuntu.com/security/notices/USN-8113-2
• Dell Security Advisory DSA-2026-313 vom 2026-09-04
  https://www.dell.com/support/kbdoc/de-de/000505510/dsa-2026-313-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities