# CVEs published 2016-11-22

10 CVEs were published on November 22, 2016: 1 critical, 0 high. Days are UTC.

- [CVE-2016-9533](https://cve.now/CVE-2016-9533.md): tif\_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. (no CVSS)
- [CVE-2016-9534](https://cve.now/CVE-2016-9534.md): tif\_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif\_rawcc and tif\_rawcp members. (no CVSS)
- [CVE-2016-9535](https://cve.now/CVE-2016-9535.md): tif\_predict.h and tif\_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in r (CVSS 9.8)
- [CVE-2016-9536](https://cve.now/CVE-2016-9536.md): tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p\_process\_jpeg\_strip(). (no CVSS)
- [CVE-2016-9537](https://cve.now/CVE-2016-9537.md): tools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. (no CVSS)
- [CVE-2016-9538](https://cve.now/CVE-2016-9538.md): tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. (no CVSS)
- [CVE-2016-9539](https://cve.now/CVE-2016-9539.md): tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). (no CVSS)
- [CVE-2016-9540](https://cve.now/CVE-2016-9540.md): tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. (no CVSS)
- [CVE-2015-8978](https://cve.now/CVE-2015-8978.md): In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each (no CVSS)
- [CVE-2016-9155](https://cve.now/CVE-2016-9155.md): The following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1.41\_SP18\_S1; CCPW3025, CCPW5025 prior to ve (no CVSS, SIEMENS-branded IP Cameras)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.