Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
libtiff tiffcrop Utility Crashes or Allows Further Exploitation
published 11 months ago
Summary
The libtiff tiffcrop utility is vulnerable to a crash or further exploitation when processing a specially crafted file. This issue matters because an attacker could trick a user into running tiffcrop on a malicious file. To protect against this, update to the latest version of libtiff or use a secure alternative to process TIFF files.
What to do
- Update juliabinarywrappers libtiff_jll to version 4.4.0+0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Julia | juliabinarywrappers | libtiff_jll |
< 4.4.0+0 Fix: upgrade to 4.4.0+0
|
Original advisory text
libtiff's tiffcrop utility has a `uint32_t` underflow that can lead to out of bounds read and write....
libtiff's tiffcrop utility has a `uint32_t` underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published25 Nov 2025
Updated23 Jul 2026
First seen23 Jul 2026
Sources
JLSEC-2025-276 · OSV
Track software like this
Free during beta