CVE-2016-3625

MEDIUM

libtiff < 4.0.6 - Denial of Service via Out-of-bounds Read in tif_read.c

Title source: llm

Description

tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.

References (3)

Core 3

Core References

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201701-16

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2016/04/08/5

Issue Tracking x_refsource_misc

http://bugzilla.maptools.org/show_bug.cgi?id=2566

Scores

CVSS v3 6.5

EPSS 0.0176

EPSS Percentile 75.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-125

Status published

Products (1)

libtiff/libtiff < 4.0.6

Published Oct 03, 2016

Tracked Since Feb 18, 2026