https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T03:54:42.606477+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2017-9935 CVE-2017-9935 2026-10-04T03:54:42.667106+00:00

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2p_free, memory corruption in t2p_readwrite_pdf_image, or a double free in t2p_free. Given these possibilities, it probably could cause arbitrary code execution.

 https://vulnerability.circl.lu/vuln/usn-3606-1 USN-3606-1 — tiff vulnerabilities 2026-10-04T03:54:42.667369+00:00

Affected: Ubuntu:14.04:LTS: tiff, Ubuntu:16.04:LTS: tiff

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges.