cve 2025 8961

CVE-2025-8961 is a locally exploitable memory-corruption vulnerability in LibTIFF's tiffcrop utility. The bug involves a double-free and missing cleanup checks in tools/tiffcrop.c, which can cause crashes or memory corruption when processing malformed TIFF inputs. LibTIFF is a widely-used C library for reading and writing TIFF image files, along with command-line tools. The vulnerability has been publicly documented and patched upstream. Users are advised to update LibTIFF to the latest version to mitigate the risk. This tag covers discussions and technical details about the CVE-2025-8961 patch and its implications for systems using LibTIFF.