Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-3622: LibTIFF tiff2rgba tool can crash on malicious TIFF

CVE-2016-3622 · published 10 years ago

Summary

The tiff2rgba utility in the LibTIFF library (as shipped in Debian's tiff package) can be forced to divide by zero when it processes a specially crafted TIFF image. This causes the program to stop working, which could interrupt any automated image handling that relies on it. Upgrade to the latest LibTIFF version or apply the vendor's patch to prevent the crash.

What to do

Update tiff to version 4.0.7-r0.
Update debian tiff to version 4.0.7-1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Alpine:v3.2	–	tiff	< 4.0.7-r0 Fix: upgrade to 4.0.7-r0
Debian:12	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
Debian:13	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
Debian:14	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
–	libtiff	libtiff	4.0.6 `cpe:2.3:a:libtiff:libtiff:4.0.6:::::::*`

Original advisory text

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

References

https://security-tracker.debian.org/tracker/CVE-2016-3622 Vendor Advisory
https://security.alpinelinux.org/vuln/CVE-2016-3622 Vendor Advisory
http://www.debian.org/security/2017/dsa-3762
http://www.openwall.com/lists/oss-security/2016/04/07/4 Exploit Mailing List Third Party Advisory
http://www.securityfocus.com/bid/85917 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1035508
https://security.gentoo.org/glsa/201701-16

Severity

6.5 Medium

Exploitation

4% chance of attack within 30 days

Type

CWE-369Divide By Zero

Timeline

Published3 Oct 2016

Updated23 Oct 2026

First seen22 Sep 2026

Sources

DEBIAN-CVE-2016-3622 · OSV

ALPINE-CVE-2016-3622 · OSV

CVE-2016-3622 · NVD

Track software like this

Free during beta