Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-8851

Опубликовано: 11 авг. 2025
Источник: nvd
CVSS3: 5.3
CVSS2: 4.3
EPSS Низкий

Описание

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*
Версия до 4.5.1 (включая)

EPSS

Процентиль: 5%
0.00021
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

CVSS3: 5.3
redhat
4 месяца назад

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

CVSS3: 5.3
msrc
3 месяца назад

LibTIFF tiffcrop tiffcrop.c readSeparateStripsetoBuffer stack-based overflow

CVSS3: 5.3
debian
4 месяца назад

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by thi ...

suse-cvrf
24 дня назад

Security update for tiff

EPSS

Процентиль: 5%
0.00021
Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119