p PatchFirst

PatchFirst · Latest vulnerabilities

tiff vulnerabilities

Vulnerabilities published for tiff in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 5

  1. SUSE-SU-2024:0973-1

    Not ratedFix available

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686). - CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590). - CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).

    • Update to 4.0.9-150000.45.41.1
    Published Updated
  2. SUSE-SU-2023:4869-1

    Not ratedFix available

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478). - CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231). - CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398). - CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).

    • Update to 4.0.9-150000.45.35.1
    Published Updated
  3. SUSE-SU-2023:4370-1

    Not ratedFix available

    Security update for tiff

    This update for tiff fixes the following issues: - CVE-2023-38289: Fixed a NULL pointer dereference in raw2tiff (bsc#1213589). - CVE-2023-38288: Fixed an integer overflow in raw2tiff (bsc#1213590). - CVE-2023-3576: Fixed a memory leak in tiffcrop (bsc#1213273). - CVE-2020-18768: Fixed an out of bounds read in tiffcp (bsc#1214574). - CVE-2023-26966: Fixed an out of bounds read when transforming a little-endian file to a big-endian output (bsc#1212881) - CVE-2023-3618: Fixed a NULL pointer dereference while encoding FAX3 files (bsc#1213274). - CVE-2023-2908: Fixed an undefined behavior issue when doing pointer arithmetic on a NULL poin

    • Update to 4.0.9-150000.45.32.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →