Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Libtiff TIFF Image Processing Can Execute Malicious Code
published 11 months ago
Summary
A specific type of image file can cause libtiff to malfunction, potentially allowing an attacker to run unauthorized code on a system. This could lead to data being stolen or altered, or the system becoming unavailable. To mitigate this risk, update libtiff to the latest version or consider replacing it with a more secure alternative.
What to do
- Update juliabinarywrappers libtiff_jll to version 4.3.0+0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Julia | juliabinarywrappers | libtiff_jll |
< 4.3.0+0 Fix: upgrade to 4.3.0+0
|
Original advisory text
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's...
A heap-based buffer overflow flaw was found in libtiff in the handling of TIFF images in libtiff's TIFF2PDF tool. A specially crafted TIFF file can lead to arbitrary code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1932044 URL
- https://gitlab.com/libtiff/libtiff/-/merge_requests/159 URL
- https://gitlab.com/rzkn/libtiff/-/commit/7be2e452ddcf6d7abca88f41d3761e6edab72b2... URL
- https://lists.debian.org/debian-lts-announce/2021/06/msg00023.html URL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... URL
- https://security.gentoo.org/glsa/202104-06 URL
- https://security.netapp.com/advisory/ntap-20210521-0009/ URL
- https://www.debian.org/security/2021/dsa-4869 URL
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published25 Nov 2025
Updated23 Jul 2026
First seen23 Jul 2026
Sources
JLSEC-2025-258 · OSV
Track software like this
Free during beta