[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f94zCPKNWSF7pwMPCZlglOpIFPQvMm9CFTxy64o2DCOM":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":83,"topProductsByCves":84,"seoMetadata":86,"meta":95},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},17747,"libtiff",1,256,0,49,"2025-08-11","l",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},103693,"Libtiff is a technology vendor with 1 tracked product and 256 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,43,48,53,58,65,72,77],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2006-3459","Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors, including a large tdir_count value in the TIFFFetchShortPair function in tif_dirread.c.","2006-08-03",7.5,"v2","High",false,0.5368,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":35},"CVE-2018-12900","Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.","2018-06-26",8.8,"v3.0",0.25183,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":25,"severity":41,"isKev":27,"epssScore":42},"CVE-2004-1308","Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.","2005-01-10",10,"Critical",0.14972,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":33,"cvssVersion":34,"severity":26,"isKev":27,"epssScore":47},"CVE-2018-18557","LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 (with JBIG enabled) decodes arbitrarily-sized JBIG into a buffer, ignoring the buffer size, which leads to a tif_jbig.c JBIGDecode out-of-bounds write.","2018-10-22",0.1496,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":52},"CVE-2006-2656","Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename.  NOTE: tiffsplit is not setuid.  If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.","2006-05-30",0.14415,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":57},"CVE-2005-1544","Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.","2005-05-14",0.14394,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":41,"isKev":27,"epssScore":64},"CVE-2015-8668","Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.","2016-01-08",9.8,"v3.1",0.13722,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":25,"severity":70,"isKev":27,"epssScore":71},"CVE-2012-4564","ppm2tiff does not check the return value of the TIFFScanlineSize function, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PPM image that triggers an integer overflow, a zero-memory allocation, and a heap-based buffer overflow.","2012-11-11",6.8,"Medium",0.13521,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":69,"cvssVersion":25,"severity":70,"isKev":27,"epssScore":76},"CVE-2009-5022","Heap-based buffer overflow in tif_ojpeg.c in the OJPEG decoder in LibTIFF before 3.9.5 allows remote attackers to execute arbitrary code via a crafted TIFF file.","2011-05-03",0.10796,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":25,"severity":70,"isKev":27,"epssScore":82},"CVE-2006-2025","Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.","2006-04-25",6.5,0.10767,[],[85],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Libtiff - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Libtiff covering 1 product with 256 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Libtiff vulnerabilities, Libtiff security, Libtiff CVE, Libtiff threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":91,"@type":92,"name":93,"description":88,"url":94},"https:\u002F\u002Fschema.org","Organization","Libtiff","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flibtiff",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":96,"apiVersion":97},"2026-10-17T12:29:12.549Z","3.0"]