Skip to content

Libtiff · weakness class

Denial of Service

32 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a remote denial of service attack.CVE-2017-9936Libtiff · 7.5% likely

    CWE-772

  2. The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.CVE-2016-5323Libtiff · 6.5% likely

    CWE-369

  3. The rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero) by setting the (1) v or (2) h parameter to 0.CVE-2016-3623Libtiff · 5.5% likely

    CWE-369

  4. LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_…CVE-2017-16232Libtiff · 5.4% likely

    CWE-772

  5. Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly…CVE-2013-4232Libtiff · 5.0% likely

    CWE-399

  6. Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the nu…CVE-2004-0804Libtiff · 4.3% likely

    CWE-369

  7. The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TI…CVE-2016-3622Libtiff · 3.9% likely

    CWE-369

  8. The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.CVE-2019-6128Libtiff · 3.9% likely

    CWE-401

  9. The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and applicati…CVE-2014-8130Libtiff · 3.8% likely

    CWE-369

  10. The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via…CVE-2018-10963Libtiff · 3.6% likely

    CWE-617

  11. In LibTIFF 4.0.9, there is an uncontrolled resource consumption in the TIFFSetDirectory function of tif_dir.c. Remote attackers could leverage this vulnerability to cause a denial…CVE-2018-5784Libtiff · 3.0% likely

    CWE-400

  12. The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocat…CVE-2017-12944Libtiff · 2.7% likely

    CWE-770

  13. There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote de…CVE-2017-13726Libtiff · 2.6% likely

    CWE-617

  14. tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.CVE-2017-7598Libtiff · 2.5% likely

    CWE-369

  15. There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a rem…CVE-2017-13727Libtiff · 2.3% likely

    CWE-617

  16. The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image.CVE-2017-7594Libtiff · 1.9% likely

    CWE-772

  17. LibTIFF tiff2ps resource consumptionCVE-2022-1210Libtiff · CVSS 4.3 · 1.8% likely

    CWE-400

  18. LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.CVE-2016-10267Libtiff · 1.8% likely

    CWE-369

  19. LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.CVE-2016-10266Libtiff · 1.7% likely

    CWE-369

  20. LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.CVE-2015-7313Libtiff · 1.6% likely

    CWE-399

  21. In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of service (memory leak…CVE-2017-9815Libtiff · 1.6% likely

    CWE-772

  22. Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is avail…CVE-2022-0865libtiff · CVSS 5.5 · 1.5% likely

    CWE-617

  23. In LibTIFF 4.0.7, a memory leak vulnerability was found in the function OJPEGReadHeaderInfoSecTablesQTable in tif_ojpeg.c, which allows attackers to cause a denial of service via…CVE-2017-9404Libtiff · 1.5% likely

    CWE-772

  24. The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image.CVE-2017-7595Libtiff · 1.4% likely

    CWE-369

  25. Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is av…CVE-2022-0909libtiff · CVSS 5.5 · 1.3% likely

    CWE-369

  26. Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is av…CVE-2022-2058libtiff · CVSS 5.5 · 1.3% likely

    CWE-369

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.