Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libtiff can be crashed or misused with crafted images
published 8 months ago
Summary
The libtiff image library (versions before 4.6.0-12) can overflow its memory when processing certain image files, which could cause the program to stop working or allow an attacker to run code. This matters for any system that opens TIFF pictures using this library. Update libtiff to the latest version or apply the vendor's patches to prevent the issue.
What to do
- Update azure libtiff to version 4.6.0-12.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | libtiff |
< 4.6.0-12 Fix: upgrade to 4.6.0-12
|
Original advisory text
CVE-2025-61144 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
References
Timeline
Published23 Feb 2026
Updated23 Sep 2026
First seen23 Sep 2026
Sources
AZL-78311 · OSV
Track software like this
Free during beta