libtiff | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libtiff package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Missing Release of Resource after Effective Lifetime	*
L Improper Input Validation	*
L Divide By Zero	*
L Divide By Zero	*
L Incorrect Type Conversion or Cast	*
L Integer Overflow or Wraparound	*
L Integer Overflow or Wraparound	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Write	*
L Heap-based Buffer Overflow	*
L Out-of-bounds Write	*
L Out-of-Bounds	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
L NULL Pointer Dereference	*
L Reachable Assertion	*
L Reachable Assertion	*
L Out-of-bounds Read	*
L Resource Exhaustion	*
L Out-of-bounds Read	*
L Improper Initialization	*
L NULL Pointer Dereference	*
L Resource Exhaustion	*
L Heap-based Buffer Overflow	*
L Out-of-Bounds	*
L Stack-based Buffer Overflow	*
L Out-of-bounds Write	*
L Memory Leak	*
L Integer Overflow or Wraparound	*
L Memory Leak	*
L Memory Leak	*
L Divide By Zero	*
L Improper Input Validation	*
L Out-of-Bounds	*
L Integer Overflow or Wraparound	*
L Improper Input Validation	*
L Improper Input Validation	*
L Integer Overflow or Wraparound	*
L Out-of-bounds Read	*
L Information Exposure	*
L Resource Exhaustion	*
L Out-of-bounds Read	*
L Heap-based Buffer Overflow	*
L Improper Input Validation	*
L Divide By Zero	*
L Heap-based Buffer Overflow	*
L Heap-based Buffer Overflow	*
L Divide By Zero	*
L Out-of-bounds Read	*
L Out-of-bounds Read	*
L Out-of-bounds Write	*
L Divide By Zero	*
L Out-of-bounds Write	*
L Out-of-bounds Read	*
L Resource Exhaustion	*
L Out-of-bounds Write	*
M Improper Clearing of Heap Memory Before Release ('Heap Inspection')	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Heap-based Buffer Overflow	*
M Missing Release of Resource after Effective Lifetime	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Write	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Out-of-bounds Write	*
M Off-by-one Error	*
M Out-of-bounds Read	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Out-of-bounds Read	*
M Stack-based Buffer Overflow	*
M Stack-based Buffer Overflow	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Out-of-bounds Write	*
M Heap-based Buffer Overflow	*
M Out-of-bounds Write	*
M Stack-based Buffer Overflow	*
M Out-of-bounds Write	*
M Integer Overflow or Wraparound	*
M Out-of-Bounds	*
M Out-of-Bounds	*
M Security Features	*
H Out-of-bounds Write	*
H Out-of-bounds Write	*
H Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Heap-based Buffer Overflow	<0:4.7.2-2.hum1
H Buffer Overflow	<0:4.7.2-2.hum1
H OS Command Injection	<0:4.7.2-2.hum1
H Out-of-bounds Write	<0:4.7.2-2.hum1
H Out-of-bounds Write	*
H Heap-based Buffer Overflow	<0:4.6.0-6.el10_0.4
M Out-of-bounds Write	<0:4.6.0-6.el10_0.4
M Out-of-bounds Write	<0:4.6.0-8.el10_2.4
H Heap-based Buffer Overflow	<0:4.6.0-8.el10_2.4
H Heap-based Buffer Overflow	<0:4.7.1-2.4.hum1
H Integer Overflow or Wraparound	<0:4.6.0-6.el10_0.3
H Integer Overflow or Wraparound	<0:4.6.0-8.el10_2.1
H Integer Overflow or Wraparound	<0:4.6.0-6.el10_1.3
H Write-what-where Condition	<0:4.7.1-2.1.hum1
M Heap-based Buffer Overflow	<0:4.6.0-6.el10_0.2
H Integer Overflow or Wraparound	<0:4.7.1-2.2.hum1
M Heap-based Buffer Overflow	<0:4.6.0-6.el10_1.2
M CVE-2025-61145	<0:4.7.1-2.1.hum1
M NULL Pointer Dereference	<0:4.7.1-2.1.hum1
M Buffer Access with Incorrect Length Value	<0:4.7.1-2.1.hum1
M NULL Pointer Dereference	*
M CVE-2025-61145	*
M Buffer Access with Incorrect Length Value	*
H Write-what-where Condition	<0:4.6.0-6.el10_1.1
H Write-what-where Condition	<0:4.6.0-6.el10_0.1
L Missing Release of Resource after Effective Lifetime	*
L Out-of-Bounds	*
L NULL Pointer Dereference	*
L NULL Pointer Dereference	*

Vulnerability

Vulnerable Version

Missing Release of Resource after Effective Lifetime