4.8
Medium
CVE-2025-8961 A weakness has been identified in LibTIFF 4.7.0
Description
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libtiff | 4.7.0 | No fix stated |
References
- VDB-319955 | LibTIFF tiffcrop tiffcrop.c main memory corruption vuldb.com
- VDB-319955 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #627957 | libtiff tiffcrop 4.7.0 (the newest master) Segmentation Fault vuldb.com
- gitlab.com gitlab.com
- gitlab.com gitlab.com
- drive.google.com drive.google.com
- www.libtiff.org www.libtiff.org
Timeline
- Published
- Last modified
Other CVEs of libtiff
The 27 CVEs of libtiff →
CVE-2025-9165
A flaw has been found in LibTIFF 4.7.0
2.0
Low
CVE-2025-8851
A vulnerability was determined in LibTIFF up to 4.5.1
4.8
Medium
CVE-2025-8534
A vulnerability classified as problematic was found in libtiff 4.6.0
2.0
Low
CVE-2024-13978
A vulnerability was found in LibTIFF up to 4.7.0
2.0
Low