Description
ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | tiff | 4.3.0-1.3 | openSUSE-SU-2024:11461-1 |
Advisories 1
- openSUSE-SU-2024:11461-1 libtiff-devel-32bit-4.3.0-1.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- APPLE-SA-2008-11-20 vendor-advisory
- ADV-2008-3232 vdb-entry
- SUSE-SR:2009:004 vendor-advisory
- 1021270 vdb-entry
- http://support.apple.com/kb/HT3318
- 32394 vdb-entry
- 32756 third-party-advisory
- 50023 vdb-entry