Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-9538: Debian TIFF may read past memory, causing crash

CVE-2016-9538 · published 9 years ago

Summary

The libtiff library version 4.0.6 packaged for Debian can read data beyond the intended buffer because a small integer wraps around during processing. This can cause the application to crash or be manipulated. Upgrade libtiff to a newer version or apply the available security patch to fix the issue.

What to do

Update debian tiff to version 4.0.7-1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Debian:12	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
Debian:13	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
Debian:14	debian	tiff	< 4.0.7-1 Fix: upgrade to 4.0.7-1
–	libtiff	libtiff	4.0.6 `cpe:2.3:a:libtiff:libtiff:4.0.6:::::::*`

Original advisory text

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

References

https://security-tracker.debian.org/tracker/CVE-2016-9538 Vendor Advisory
http://www.debian.org/security/2017/dsa-3762
http://www.securityfocus.com/bid/94484 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/94753
https://github.com/vadz/libtiff/commit/43c0b81a818640429317c80fea1e66771e85024b#... Issue Tracking Patch Third Party Advisory

Severity

9.8 Critical

Exploitation

4% chance of attack within 30 days

Type

CWE-190Integer Overflow

Timeline

Published22 Nov 2016

Updated4 Nov 2026

First seen22 Sep 2026

Sources

DEBIAN-CVE-2016-9538 · OSV

CVE-2016-9538 · NVD

Track software like this

Free during beta