CVE search · CVE-2025-8961
CVE-2025-8961
low 1.9
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cna@vuldb.com
- Weakness
- CWE-119
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 4.0 | low 1.9 | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
cna@vuldb.comSecondary |
| CVSS 3.1 | low 3.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
cna@vuldb.comSecondary |
| CVSS 2.0 | low 1.7 | AV:L/AC:L/Au:S/C:N/I:N/A:P |
cna@vuldb.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- libtiff · libtiff
References
- http://www.libtiff.org/Product
- https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharingExploit
- https://gitlab.com/libtiff/libtiff/-/issues/721ExploitIssue TrackingVendor Advisory
- https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960ExploitIssue TrackingVendor Advisory
- https://vuldb.com/?ctiid.319955Permissions RequiredVDB Entry
- https://vuldb.com/?id.319955Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.627957Third Party AdvisoryVDB Entry