Description
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | LibTIFF | 4.7.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | tiff | 4.7.0-5 | — |
| Debian 13 | tiff | 4.7.0-3+deb13u1 | — |
| Debian 12 | tiff | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | tiff | 4.7.0-3ubuntu3 | — |
| Ubuntu 24.04 LTS | tiff | 4.5.1+git230720-4ubuntu2.4 | USN-7783-1 |
| Ubuntu 22.04 LTS | tiff | 4.3.0-6ubuntu0.12 | USN-7783-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | tiff | 4.1.0+git191117-2ubuntu0.20.04.14+esm2 | USN-7783-1 |
| Ubuntu Pro 18.04 LTS | tiff | 4.0.9-5ubuntu0.10+esm9 | USN-7783-1 |
| Ubuntu Pro 16.04 LTS | tiff | 4.0.6-1ubuntu0.8+esm19 | USN-7783-1 |
| Ubuntu Pro 14.04 LTS | tiff | 4.0.3-7ubuntu0.11+esm16 | USN-7783-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03348-1, SUSE-SU-2025:03345-1 |
| SLES 15 SP6 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03348-1, SUSE-SU-2025:03345-1 |
| SLES 12 SP5 | tiff | 4.0.9-44.94.1 | SUSE-SU-2025:03346-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | tiff | 4.7.1-160000.1.1 | SUSE-SU-2025:21009-1 |
| SLES 16.0 | tiff | 4.7.1-160000.1.1 | SUSE-SU-2025:21009-1 |
| SLE Micro 6.2 | tiff | 4.7.1-160000.1.1 | SUSE-SU-2025:21032-1 |
| SLE Micro 6.1 | tiff | 4.7.1-slfo.1.1_1.1 | SUSE-SU-2025:20971-1 |
| SLE Micro 6.0 | tiff | 4.7.1-1.1 | SUSE-SU-2025:21037-1 |
| SLE Micro 5.5 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03345-1 |
| SLE Micro 5.4 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03345-1 |
| SLE Micro 5.3 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03345-1 |
| SLE Micro 5.2 | tiff | 4.0.9-150000.45.55.1 | SUSE-SU-2025:03345-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | tiff | 4.7.0-9.1 | openSUSE-SU-2025:15541-1 |
| openSUSE Leap 16.0 | tiff +1 | 4.7.1-160000.1.1 | openSUSE-SU-2025:20049-1 |
| openSUSE Leap 15.6 | tiff | 4.7.0-150600.3.18.1 | SUSE-SU-2025:03348-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | tiff | 4.7.1-r0 | — |
| Alpine v3.23 | tiff | 4.7.1-r0 | — |
| Alpine v3.22 | tiff | 4.7.1-r0 | — |
| Alpine v3.21 | tiff | 4.7.1-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | libtiff +3 | 4.4.0-4.amzn2023.0.23 | ALAS2023-2025-1212 |
| Amazon Linux 2 | compat-libtiff3 | 3.9.4-12.amzn2.0.7 | ALAS2-2026-3194, ALAS2-2025-3039 |
| Amazon Linux 2 | libtiff +3 | 4.0.3-35.amzn2.0.26 | ALAS2-2025-3019 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | libtiff | 4.6.0-11 | — |
| Azure Linux 2 (CBL-Mariner) | libtiff | 4.6.0-11 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | tiff | 4.7.0-r6 | — |
Advisories 17
- WID-SEC-2026-0349 Dell Avamar und NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
- USN-7783-1 tiff vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- openSUSE-SU-2025:20049-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15541-1 libtiff-devel-32bit-4.7.0-9.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21009-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20971-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21037-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03346-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03345-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03348-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:21032-1 Security update for tiff SUSE / openSUSE Security Updates · Mar 23, 2026
- WID-SEC-2025-1847 libTIFF: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 19, 2026
- ALAS2-2026-3194 Moderate: compat-libtiff3 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 19, 2026
- ALAS2023-2025-1212 Moderate: libtiff security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 5, 2026
- ALAS2-2025-3019 Moderate: libtiff security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 5, 2026
- ALAS2-2025-3039 Low: compat-libtiff3 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 27, 2025
References
- VDB-319955 | LibTIFF tiffcrop tiffcrop.c main memory corruption vdb-entry technical-description
- VDB-319955 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #627957 | libtiff tiffcrop 4.7.0 (the newest master) Segmentation Fault third-party-advisory
- https://gitlab.com/libtiff/libtiff/-/issues/721 issue-tracking
- https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960 issue-tracking
- https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing exploit
- http://www.libtiff.org/ product