# cve.now: Libtiff

The newest entries naming Libtiff as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-3316](https://cve.now/CVE-2023-3316.md): A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones. (CVSS 5.9)
- [CVE-2022-4645](https://cve.now/CVE-2022-4645.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff (CVSS 6.8)
- [CVE-2023-0804](https://cve.now/CVE-2023-0804.md): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0803](https://cve.now/CVE-2023-0803.md): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0802](https://cve.now/CVE-2023-0802.md): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0801](https://cve.now/CVE-2023-0801.md): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif\_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, (CVSS 6.8)
- [CVE-2023-0800](https://cve.now/CVE-2023-0800.md): LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0799](https://cve.now/CVE-2023-0799.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0798](https://cve.now/CVE-2023-0798.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0797](https://cve.now/CVE-2023-0797.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif\_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, a (CVSS 6.8)
- [CVE-2023-0796](https://cve.now/CVE-2023-0796.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2023-0795](https://cve.now/CVE-2023-0795.md): LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted (CVSS 6.8)
- [CVE-2022-3627](https://cve.now/CVE-2022-3627.md): LibTIFF 4.4.0 has an out-of-bounds write in \_TIFFmemcpy in libtiff/tif\_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:686 (CVSS 5.5)
- [CVE-2022-3626](https://cve.now/CVE-2022-3626.md): LibTIFF 4.4.0 has an out-of-bounds write in \_TIFFmemset in libtiff/tif\_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7 (CVSS 5.5)
- [CVE-2022-3599](https://cve.now/CVE-2022-3599.md): LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via (CVSS 5.5)
- [CVE-2022-3598](https://cve.now/CVE-2022-3598.md): LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial (CVSS 5.5)
- [CVE-2022-3597](https://cve.now/CVE-2022-3597.md): LibTIFF 4.4.0 has an out-of-bounds write in \_TIFFmemcpy in libtiff/tif\_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:682 (CVSS 5.5)
- [CVE-2022-3570](https://cve.now/CVE-2022-3570.md): Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds mem (CVSS 7.7)
- [CVE-2022-2953](https://cve.now/CVE-2022-2953.md): LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via (CVSS 5.5)
- [CVE-2022-2058](https://cve.now/CVE-2022-2058.md): Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-2057](https://cve.now/CVE-2022-2057.md): Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-2056](https://cve.now/CVE-2022-2056.md): Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-1623](https://cve.now/CVE-2022-1623.md): LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif\_lzw.c:624, allowing attackers to cause a denial-of-service via a (CVSS 5.5)
- [CVE-2022-1622](https://cve.now/CVE-2022-1622.md): LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif\_lzw.c:619, allowing attackers to cause a denial-of-service via a (CVSS 5.5)
- [CVE-2022-1056](https://cve.now/CVE-2022-1056.md): Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-0924](https://cve.now/CVE-2022-0924.md): Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-0909](https://cve.now/CVE-2022-0909.md): Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-0907](https://cve.now/CVE-2022-0907.md): Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted (CVSS 5.5)
- [CVE-2022-0891](https://cve.now/CVE-2022-0891.md): A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or o (CVSS 6.1)
- [CVE-2022-0865](https://cve.now/CVE-2022-0865.md): Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. (CVSS 5.5)
- [CVE-2022-0562](https://cve.now/CVE-2022-0562.md): Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif\_dirread.c in libtiff versions from 4.0 to 4 (CVSS 5.5)
- [CVE-2022-0561](https://cve.now/CVE-2022-0561.md): Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif\_dirread.c in libtiff versions from 3.9.0 (CVSS 5.5)
- [CVE-2017-9117](https://cve.now/CVE-2017-9117.md): In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-inf (CVSS 4.0)
- [CVE-2016-5652](https://cve.now/CVE-2016-5652.md): An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/libtiff
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.