Description
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tiff | 3.6.1-2 | — |
| Debian 13 | tiff | 3.6.1-2 | — |
| Debian 12 | tiff | 3.6.1-2 | — |
| Debian 3.0 | tiff | 3.5.5-6woody1 | DSA-567-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | kdegraphics +1 | 7:3.1.3-3.7 | RHSA-2005:021 |
| RHEL 3 | libtiff +1 | 3.5.7-20.1 | RHSA-2004:577 |
| RHEL 3 | tetex +5 | 1.0.7-67.7 | RHSA-2005:354 |
Advisories 4
- RHSA-2005:354 Red Hat Security Advisory: tetex security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2005:021 Red Hat Security Advisory: kdegraphics security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2004:577 Red Hat Security Advisory: libtiff security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-567-1 tiff - heap overflows Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2004:577 vendor-advisory
- MDKSA-2004:109 vendor-advisory
- RHSA-2005:021 vendor-advisory
- P-015 third-party-advisory government-resource
- 201072 vendor-advisory
- oval:org.mitre.oval:def:9907 vdb-entry signature
- 101677 vendor-advisory
- SUSE-SA:2004:038 vendor-advisory
- VU#687568 third-party-advisory
- 1011674 vdb-entry
- CLA-2004:888 vendor-advisory
- MDKSA-2005:052 vendor-advisory
- libtiff-bo(17715) vdb-entry
- 2004-0054 vendor-advisory
- http://www.kde.org/info/security/advisory-20041209-2.txt
- RHSA-2005:354 vendor-advisory
- 12818 third-party-advisory
- 11406 vdb-entry
- oval:org.mitre.oval:def:100116 vdb-entry signature
- DSA-567 vendor-advisory
- OpenPKG-SA-2004.043 vendor-advisory