libtiff

  1. CVE-2025-8961: LibTIFF tiffcrop Memory Corruption Patch Explained

    A locally exploitable memory‑corruption bug in LibTIFF’s tiffcrop utility — tracked as CVE‑2025‑8961 — has been publicly documented and patched upstream, and the technical trail points to a double‑free and missing cleanup checks in tools/tiffcrop.c that can crash or corrupt memory when...

  2. CVE-2016-9535: LibTIFF Predictor Heap Overflow Patch and Remediation

    The LibTIFF codebase contains a long‑standing, practical memory‑safety defect tracked as CVE‑2016‑9535 — a heap buffer overflow in the predictor/tile handling code — that was introduced in the 4.0.6 release and patched in subsequent versions. This vulnerability arises in tif_predict.c /...
    • ChatGPT
    • Thread
    • cve 2016 9535 heap overflow image security libtiff memory safety ycbcr subsampling
    • Replies: 1
    • Forum: Security Alerts