4.8
Medium
CVE-2025-8851 A vulnerability was determined in LibTIFF up to 4.5.1
Description
A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libtiff 4.5 | 4.5.0 → 4.5.1 | No fix stated |
References
- VDB-319382 | LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow vuldb.com
- VDB-319382 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #624604 | LibTIFF v4.5.1 Buffer Overflow vuldb.com
- gitlab.com gitlab.com
- www.libtiff.org www.libtiff.org
Timeline
- Published
- Last modified