Direct Vulnerabilities

Known vulnerabilities in the tiff package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Integer Overflow or Wraparound

<4.7.2-r0
  • M
Unchecked Return Value

<4.3.0-r1
  • M
Integer Underflow

<4.4.0-r0
  • M
Out-of-Bounds

<4.2.0-r0
  • M
Release of Invalid Pointer or Reference

<4.4.0-r1
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
NULL Pointer Dereference

<4.3.0-r1
  • H
Integer Overflow or Wraparound

<4.2.0-r0
  • H
Out-of-bounds Read

<4.0.9-r6
  • M
Out-of-bounds Read

<4.5.0-r0
  • M
Reachable Assertion

<4.0.9-r6
  • M
Out-of-bounds Write

<4.5.0-r5
  • H
Numeric Errors

<4.5.0-r0
  • M
Divide By Zero

<4.4.0-r1
  • M
Reachable Assertion

<4.3.0-r1
  • H
Out-of-Bounds

<4.2.0-r0
  • C
Out-of-Bounds

<4.0.7-r1
  • M
Out-of-bounds Write

<4.5.0-r5
  • M
Out-of-Bounds

<4.2.0-r0
  • M
Out-of-bounds Write

<4.5.0-r3
  • M
Out-of-bounds Read

<4.3.0-r1
  • M
Use of Uninitialized Resource

<4.3.0-r1
  • H
Out-of-Bounds

<4.0.9-r6
  • H
Out-of-bounds Write

<4.3.0-r1
  • H
Memory Leak

<4.1.0-r0
  • H
Integer Overflow or Wraparound

<4.0.9-r8
  • M
Incorrect Calculation of Buffer Size

<4.4.0-r1
  • M
Divide By Zero

<4.4.0-r1
  • M
Improper Input Validation

<4.0.10-r2
  • M
Divide By Zero

<4.4.0-r1
  • L
Memory Leak

<4.7.1-r0
  • L
Out-of-Bounds

<4.7.1-r0
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
Improper Input Validation

<4.0.9-r6
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
Out-of-bounds Read

<4.5.0-r5
  • M
Out-of-bounds Write

<4.4.0-r1
  • M
NULL Pointer Dereference

<4.3.0-r1
  • M
Out-of-bounds Write

<4.5.0-r5
  • M
Out-of-bounds Read

<4.5.0-r5
  • M
NULL Pointer Dereference

<4.3.0-r1
  • H
Out-of-bounds Write

<4.0.9-r8
  • M
Double Free

<4.4.0-r1
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
Out-of-bounds Read

<4.0.9-r8
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
Improper Validation of Specified Quantity in Input

<4.4.0-r0
  • M
Out-of-bounds Read

<4.3.0-r1
  • M
Integer Underflow

<4.4.0-r0
  • M
Use After Free

<4.5.0-r5
  • M
Out-of-bounds Read

<4.5.0-r5
  • M
Out-of-bounds Write

<4.5.0-r0
  • M
Out-of-bounds Read

<4.5.0-r0
  • M
Divide By Zero

<4.3.0-r1
  • M
Out-of-bounds Read

<4.5.0-r5
  • M
Out-of-bounds Write

<4.5.0-r5
  • M
Out-of-bounds Write

<4.5.0-r5
  • H
Improper Input Validation

<4.0.7-r2
  • M
Integer Overflow or Wraparound

<4.0.10-r1
  • M
Missing Release of Resource after Effective Lifetime

<4.0.7-r2
  • M
Missing Release of Resource after Effective Lifetime

<4.0.8-r1
  • H
Out-of-bounds Write

<4.0.9-r5
  • M
NULL Pointer Dereference

<4.0.9-r4
  • H
Out-of-bounds Write

<4.0.10-r0
  • H
Integer Overflow or Wraparound

<4.0.7-r2
  • H
Improper Input Validation

<4.0.8-r1
  • H
Divide By Zero

<4.0.7-r2
  • H
Improper Input Validation

<4.0.7-r2
  • M
Divide By Zero

<4.0.7-r2
  • M
Out-of-Bounds

<4.0.9-r0
  • H
Missing Release of Resource after Effective Lifetime

<4.0.9-r0
  • H
Improper Input Validation

<4.0.7-r2
  • H
Out-of-bounds Write

<4.0.10-r0
  • M
NULL Pointer Dereference

<4.0.9-r1
  • M
Resource Exhaustion

<4.0.9-r2
  • M
NULL Pointer Dereference

<4.0.10-r0
  • M
Out-of-Bounds

<4.0.7-r2