# CVEs published 2016-11-22

10 CVEs were published on November 22, 2016: 1 critical, 0 high. Days are UTC.

- [CVE-2016-9533](https://cve.now/CVE-2016-9533.md): tif\_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. (no CVSS)
- [CVE-2016-9534](https://cve.now/CVE-2016-9534.md): tif\_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif\_rawcc and tif\_rawcp members. (no CVSS)
- [CVE-2016-9535](https://cve.now/CVE-2016-9535.md): tif\_predict.h and tif\_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in… (CVSS 9.8)
- [CVE-2016-9536](https://cve.now/CVE-2016-9536.md): tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p\_process\_jpeg\_strip(). (no CVSS)
- [CVE-2016-9537](https://cve.now/CVE-2016-9537.md): tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. (no CVSS)
- [CVE-2016-9538](https://cve.now/CVE-2016-9538.md): tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. (no CVSS)
- [CVE-2016-9539](https://cve.now/CVE-2016-9539.md): tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). (no CVSS)
- [CVE-2016-9540](https://cve.now/CVE-2016-9540.md): tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. (no CVSS)
- [CVE-2015-8978](https://cve.now/CVE-2015-8978.md): In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities… (no CVSS)
- [CVE-2016-9155](https://cve.now/CVE-2016-9155.md): The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41\_SP18\_S1; CCPW3025, CCPW5025 prior to… (no CVSS, SIEMENS-branded IP Cameras)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.