libtiff has 3 CVEs on record between 2023 and 2026. The median CVSS is 7.5 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2026-4775High· 7.8A flaw was found in the libtiff library43CVE-2023-52355High· 7.5An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API42CVE-2023-3576Medium· 5.5A memory leak flaw was found in Libtiff's tiffcrop utility30
libtiff vulnerabilities
CVEs affecting libtiff, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-4775High· 7.8A flaw was found in the libtiff library
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds …
CVE-2023-52355High· 7.5An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smal…
CVE-2023-3576Medium· 5.5A memory leak flaw was found in Libtiff's tiffcrop utility
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, r…