Description
Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors involving decoding large RLE images.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tiff | 3.8.2-6 | — |
| Debian 13 | tiff | 3.8.2-6 | — |
| Debian 12 | tiff | 3.8.2-6 | — |
| Debian 3.1 | tiff | 3.7.2-7 | DSA-1137-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | libtiff +1 | 3.6.1-12 | RHSA-2006:0603 |
| RHEL 3 | kdegraphics +1 | 7:3.1.3-3.10 | RHSA-2006:0648 |
| RHEL 3 | libtiff +1 | 3.5.7-25.el3.4 | RHSA-2006:0603 |
Advisories 3
- RHSA-2006:0648 Red Hat Security Advisory: kdegraphics security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2006:0603 Red Hat Security Advisory: libtiff security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1137-1 tiff - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- APPLE-SA-2006-08-01 vendor-advisory
- ADV-2007-3486 vdb-entry
- 21501 third-party-advisory
- MDKSA-2006:136 vendor-advisory
- 21537 third-party-advisory
- 21632 third-party-advisory
- GLSA-200608-07 vendor-advisory
- 21338 third-party-advisory
- USN-330-1 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-166.htm
- 27726 vdb-entry
- ADV-2006-3101 vdb-entry
- 1016628 vdb-entry
- 21253 third-party-advisory
- DSA-1137 vendor-advisory
- 21370 third-party-advisory
- 1016671 vdb-entry
- 21598 third-party-advisory
- RHSA-2006:0648 vendor-advisory
- MDKSA-2006:137 vendor-advisory
- 19289 vdb-entry
- 27222 third-party-advisory
- ADV-2007-4034 vdb-entry
- TA06-214A third-party-advisory
- SUSE-SA:2006:044 vendor-advisory
- 21290 third-party-advisory
- 21274 third-party-advisory
- ADV-2006-3105 vdb-entry
- 27181 third-party-advisory
- oval:org.mitre.oval:def:11301 vdb-entry signature
- RHSA-2006:0603 vendor-advisory
- 21304 third-party-advisory
- SSA:2006-230-01 vendor-advisory
- http://docs.info.apple.com/article.html?artnum=304063
- 19282 vdb-entry
- https://issues.rpath.com/browse/RPL-558
- 27832 third-party-advisory
- 21346 third-party-advisory
- 201331 vendor-advisory
- 21319 third-party-advisory
- 21392 third-party-advisory
- 21334 third-party-advisory
- 22036 third-party-advisory
- 2006-0044 vendor-advisory
- 103160 vendor-advisory