Homepage

tiff

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the tiff package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Heap-based Buffer Overflow

<4.7.0-3+e16
  • L
CVE-2026-52491

<4.7.0-3+e15
  • L
TEMP-0846838-9738BD

<4.0.7-2
  • L
CVE-2026-52492

<4.7.0-3+e14
  • L
CVE-2026-52490

<4.7.0-3+e14
  • L
CVE-2026-36849

<4.7.0-3+e12
  • H
Heap-based Buffer Overflow

<4.7.0-3+e11
  • M
Double Free

<4.7.0-3+e11
  • H
Out-of-Bounds

<4.7.0-3+e7
  • M
NULL Pointer Dereference

<4.7.0-3+e9
  • L
Improper Resource Shutdown or Release

<4.7.0-3+e4
  • H
Out-of-bounds Write

<4.5.0-6+deb12u2
  • H
Out-of-bounds Write

<4.5.1+git230720-4
  • M
Integer Overflow or Wraparound

<4.5.0-6+deb12u1
  • M
Integer Overflow or Wraparound

<4.5.0-6+deb12u1
  • M
Out-of-Bounds

<4.5.0-2
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Buffer Overflow

<4.5.0-6+deb12u2
  • M
Out-of-bounds Write

<4.5.0-6+deb12u2
  • M
Buffer Overflow

<4.5.0-5
  • H
Buffer Overflow

<4.5.0-5
  • M
Buffer Overflow

<4.5.0-6+deb12u2
  • M
Out-of-bounds Write

<4.5.0-4
  • M
Loop with Unreachable Exit Condition ('Infinite Loop')

<4.5.0-2
  • M
Out-of-bounds Write

<4.4.0-4
  • M
Out-of-bounds Read

<4.3.0-3
  • H
Out-of-bounds Write

<4.1.0+git201212-1
  • H
Integer Overflow or Wraparound

<4.1.0+git201212-1
  • M
Out-of-Bounds

<4.1.0+git201212-1
  • M
Out-of-Bounds

<4.1.0+git201212-1
  • M
Out-of-bounds Write

<4.0.10+git190814-1
  • M
Out-of-bounds Write

<4.1.0+git201212-1
  • H
Out-of-bounds Write

<4.0.10+git190814-1
  • M
Out-of-bounds Write

<4.0.10+git190814-1
  • H
Integer Overflow or Wraparound

<4.0.10+git190818-1
  • M
Integer Overflow or Wraparound

<4.0.10+git190814-1
  • M
NULL Pointer Dereference

<4.0.10-4
  • M
NULL Pointer Dereference

<4.0.10-1
  • H
Out-of-bounds Write

<4.0.9+git181026-1
  • H
Out-of-bounds Write

<4.0.9-2
  • H
Out-of-bounds Write

<4.0.9+git181026-1
  • H
Integer Overflow or Wraparound

<4.0.9+git181026-1
  • M
NULL Pointer Dereference

<4.0.10-4
  • H
Out-of-bounds Write

<4.0.9-5
  • H
Out-of-bounds Write

<4.0.9-5
  • H
Out-of-bounds Write

<4.0.10-4
  • M
Reachable Assertion

<4.0.9-6
  • M
Missing Release of Resource after Effective Lifetime

<4.0.6-3
  • M
Out-of-bounds Read

<4.0.6-3
  • M
NULL Pointer Dereference

<4.7.0
  • M
NULL Pointer Dereference

<4.0.9-3
  • H
Use After Free

<4.7.0
  • H
Out-of-bounds Read

<4.0.6-3
  • H
Out-of-Bounds

<4.0.9-5
  • H
Missing Release of Resource after Effective Lifetime

<4.7.0
  • M
Reachable Assertion

<4.0.8-5
  • M
Reachable Assertion

<4.0.8-5
  • H
Allocation of Resources Without Limits or Throttling

<4.0.8-6
  • M
Improper Input Validation

<4.0.9-5
  • H
Out-of-bounds Write

<4.0.8-4
  • H
Improper Input Validation

<4.0.8-3
  • M
Improper Input Validation

<4.0.7-7
  • H
Out-of-Bounds

<4.0.7-2
  • H
Out-of-Bounds

<4.0.7-2
  • H
Out-of-bounds Read

<4.0.7-2
  • H
Out-of-bounds Read

<4.0.7-2
  • H
Integer Underflow

<4.0.7-2
  • M
Divide By Zero

<4.0.7-2
  • M
Divide By Zero

<4.0.7-2
  • M
Out-of-Bounds

<4.0.8-2
  • H
Numeric Errors

<4.0.7-4
  • H
Out-of-Bounds

<4.0.7-2
  • H
Out-of-Bounds

<4.0.7-2
  • H
Integer Overflow or Wraparound

<4.5.0-6+deb12u4
  • H
Write-what-where Condition

<4.5.0-6+deb12u3
  • L
Memory Leak

<4.7.0-3+e4
  • L
Out-of-Bounds

<4.7.0-3+e4
  • M
Out-of-Bounds

<4.5.1
  • L
Improper Resource Shutdown or Release

<4.7.0-3+e4
  • H
Out-of-Bounds

<4.7.0-3+e4
  • H
Out-of-Bounds

<4.7.0-3+e4
  • H
NULL Pointer Dereference

<4.5.0-6+deb12u2
  • M
Resource Exhaustion

<4.5.1+git230720-2
  • L
Out-of-bounds Write

<4.7.0
  • M
Buffer Overflow

<4.5.0-6+deb12u2
  • M
Memory Leak

<4.5.0-6+deb12u1
  • M
NULL Pointer Dereference

<4.5.0-5
  • M
Out-of-bounds Write

<4.7.0
  • M
NULL Pointer Dereference

<4.5.0-6+deb12u2
  • M
NULL Pointer Dereference

<4.5.0-6
  • M
Out-of-bounds Read

<4.7.0
  • M
Out-of-bounds Write

<4.5.0-5
  • M
Out-of-bounds Write

<4.5.0-5
  • M
Out-of-bounds Write

<4.5.0-5
  • M
Out-of-bounds Write

<4.5.0-5
  • M
Out-of-bounds Write

<4.5.0-5
  • M
Use After Free

<4.5.0-5
  • M
Out-of-bounds Read

<4.5.0-5
  • M
Out-of-bounds Read

<4.5.0-5
  • M
Out-of-bounds Read

<4.5.0-5
  • M
Out-of-bounds Read

<4.5.0-5
  • M
Out-of-bounds Read

<4.4.0-5
  • H
Numeric Errors

<4.4.0-6
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Read

<4.4.0-5
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Write

<4.4.0-5
  • M
Out-of-bounds Read

<4.4.0-6
  • M
Integer Underflow

<4.4.0~rc1-1
  • M
Improper Validation of Specified Quantity in Input

<4.4.0~rc1-1
  • M
Integer Underflow

<4.4.0~rc1-1
  • M
Release of Invalid Pointer or Reference

<4.4.0-6
  • M
Incorrect Calculation of Buffer Size

<4.4.0-6
  • M
Double Free

<4.4.0-6
  • M
Divide By Zero

<4.4.0-3
  • M
Divide By Zero

<4.4.0-3
  • M
Divide By Zero

<4.4.0-3
  • M
Out-of-bounds Read

<4.4.0~rc1-1
  • M
Out-of-bounds Read

<4.4.0~rc1-1
  • M
Stack-based Buffer Overflow

<4.3.0-8
  • M
Out-of-bounds Read

<4.3.0-7
  • M
Improper Resource Shutdown or Release

<4.7.0
  • M
Out-of-bounds Read

<4.4.0~rc1-1
  • M
Out-of-bounds Read

<4.3.0-6
  • M
Divide By Zero

<4.3.0-6
  • M
NULL Pointer Dereference

<4.3.0-6
  • M
Unchecked Return Value

<4.3.0-6
  • H
Out-of-bounds Write

<4.3.0-6
  • M
Reachable Assertion

<4.3.0-5
  • M
NULL Pointer Dereference

<4.3.0-4
  • M
NULL Pointer Dereference

<4.3.0-4
  • M
CVE-2019-7663

<4.0.10-4
  • H
Memory Leak

<4.0.10-4
  • H
Out-of-bounds Write

<4.0.9-6
  • M
NULL Pointer Dereference

<4.0.9-5
  • M
Resource Exhaustion

<4.0.9-4
  • H
Out-of-bounds Read

<4.0.6-3
  • M
Missing Release of Resource after Effective Lifetime

<4.0.8-3
  • H
Out-of-bounds Read

<4.0.9-2
  • M
Missing Release of Resource after Effective Lifetime

<4.0.8-1
  • M
Missing Release of Resource after Effective Lifetime

<4.0.8-1
  • M
Missing Release of Resource after Effective Lifetime

<4.0.8-1
  • M
Out-of-bounds Read

<4.0.8-2
  • C
Out-of-bounds Read

<4.0.7-1
  • H
Integer Overflow or Wraparound

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • H
Divide By Zero

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • M
Divide By Zero

<4.0.7-6
  • M
Missing Release of Resource after Effective Lifetime

<4.0.7-6
  • M
Out-of-Bounds

<4.0.7-6
  • H
Improper Input Validation

<4.0.7-6
  • H
Out-of-bounds Read

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-5
  • C
Out-of-Bounds

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • C
Integer Overflow or Wraparound

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • C
Out-of-Bounds

<4.0.7-1
  • M
Out-of-bounds Read

<4.0.7-1
  • H
Out-of-bounds Write

<4.0.6-3
  • H
Out-of-bounds Read

<4.0.7-1
  • M
Out-of-bounds Read

<4.0.7-1
  • H
CVE-2016-8331

<4.0.6-3
  • C
Numeric Errors

<4.0.6-2
  • H
Out-of-Bounds

<4.0.6-3
  • H
Divide By Zero

<4.0.6-2
  • M
Out-of-bounds Read

<4.0.7-1
  • M
Out-of-Bounds

<4.0.6-2
  • M
Out-of-Bounds

<4.0.6-3
  • M
Out-of-Bounds

<4.0.6-3
  • M
Out-of-Bounds

<4.0.6-2
  • M
Out-of-bounds Read

<4.0.6-2
  • M
Out-of-bounds Read

<4.0.6-2
  • H
Out-of-bounds Write

<4.0.6-2
  • M
Improper Input Validation

<4.0.6-3
  • H
Out-of-Bounds

<4.0.7-1
  • H
Out-of-Bounds

<4.0.7-1
  • H
Integer Overflow or Wraparound

<4.0.7-1
  • H
Out-of-bounds Read

<4.0.6-3
  • H
Out-of-bounds Read

<4.0.6-3
  • H
Out-of-bounds Read

<4.0.6-3
  • H
Out-of-bounds Write

<4.0.6-3
  • H
Out-of-bounds Read

<4.0.6-3
  • M
Out-of-bounds Read

<4.0.3-1
  • H
Out-of-bounds Write

<4.0.6-3
  • H
Divide By Zero

<4.0.6-3
  • M
Divide By Zero

<4.0.7-1
  • H
Out-of-bounds Read

<4.0.6-3
  • H
Out-of-bounds Read

<4.0.6-3
  • M
Out-of-bounds Read

<4.0.6-3
  • M
Out-of-Bounds

<4.0.6-3
  • H
Improper Input Validation

<4.0.3-12
  • M
Out-of-bounds Write

<4.0.6-1
  • M
Out-of-bounds Read

<4.0.6-1
  • M
Out-of-bounds Write

<4.0.6-1
  • M
Out-of-bounds Write

<4.0.6-1
  • M
Out-of-Bounds

<4.0.6-1
  • C
Out-of-bounds Write

<4.0.6-3
  • M
Out-of-Bounds

<4.0.6-1
  • C
Security Features

<4.0.7-7
  • M
Resource Management Errors

<4.0.7-1
  • M
Out-of-Bounds

<4.0.3-12.1
  • M
Out-of-Bounds

<4.0.3-12.1
  • M
Numeric Errors

<4.0.3-12
  • M
Divide By Zero

<4.0.5-1
  • H
Out-of-bounds Write

<4.0.3-12.1
  • M
Out-of-bounds Write

<4.0.3-12.3
  • M
Out-of-bounds Read

<4.0.6-3
  • M
Out-of-Bounds

<4.0.3-3
  • M
Out-of-Bounds

<4.0.3-9
  • M
Resource Management Errors

<4.0.3-2
  • M
Out-of-Bounds

<4.0.3-2
  • H
Out-of-Bounds

<4.0.2-6+nmu1
  • H
Out-of-Bounds

<4.0.2-6+nmu1
  • M
Out-of-Bounds

<4.0.2-1
  • M
CVE-2012-4564

<4.0.2-5
  • M
Out-of-Bounds

<4.0.2-4
  • M
Out-of-Bounds

<4.0.2-2
  • M
Numeric Errors

<4.0.2-1
  • H
Numeric Errors

<4.0-1
  • M
Numeric Errors

<4.0.1-2
  • M
Out-of-Bounds

<3.9.4-9
  • H
Out-of-Bounds

<3.9.4-7
  • H
Out-of-Bounds

<3.9.4-1
  • M
Out-of-Bounds

<3.9.4-5
  • M
Improper Input Validation

<3.9.4-1
  • M
Improper Input Validation

<3.9.6-1
  • M
Improper Input Validation

<3.9.4-1
  • M
Improper Input Validation

<3.9.6-1
  • M
Improper Input Validation

<4.0.6-1
  • M
Improper Input Validation

<3.9.6-1
  • M
Out-of-Bounds

<3.9.4-4
  • M
CVE-2010-2482

<3.9.4-1
  • M
Out-of-Bounds

<3.9.4-1
  • M
CVE-2010-2443

<3.9.4-1
  • H
Improper Input Validation

<3.9.4-2
  • M
Out-of-Bounds

<3.9.4-1
  • M
Numeric Errors

<3.9.4-1
  • M
Numeric Errors

<3.9.4-1
  • M
Out-of-Bounds

<3.9.5-1
  • H
Numeric Errors

<3.8.2-13
  • M
Out-of-Bounds

<3.8.2-12
  • M
Out-of-Bounds

<3.8.2-11
  • H
CVE-2006-3465

<3.8.2-6
  • H
Numeric Errors

<3.8.2-6
  • H
Out-of-Bounds

<3.8.2-6
  • H
Out-of-Bounds

<3.8.2-6
  • H
CVE-2006-3461

<3.8.2-6
  • H
Out-of-Bounds

<3.8.2-6
  • H
Out-of-Bounds

<3.8.2-6
  • H
Out-of-Bounds

<3.8.2-3
  • H
CVE-2006-2193

<3.8.2-4
  • M
CVE-2006-2120

<3.8.1
  • M
Out-of-Bounds

<3.8.1
  • M
CVE-2006-2025

<3.8.1
  • M
CVE-2006-2024

<3.8.1
  • M
CVE-2006-0405

<3.8.0-2
  • M
CVE-2005-2452

<3.7.0-1
  • H
CVE-2005-1544

<3.7.2-3
  • C
CVE-2004-1308

<3.6.1-4
  • H
CVE-2004-1307

<3.7.0
  • M
CVE-2004-1183

<3.6.1-5
  • M
CVE-2004-0886

<3.6.1-2
  • M
Divide By Zero

<3.6.1-2
  • H
CVE-2004-0803

<3.6.1-2