CVE-2025-8961
LibTIFF tiffcrop tiffcrop.c main memory corruption
Summary
LibTIFF tiffcrop tiffcrop.c main memory corruption
Original description
The description as published by the source.
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2025-8961 tiff Fixed in: 4.7.1-r0
- BellSoft Alpaquita BELL-CVE-2025-8961 tiff Fixed in: 4.4.0-r5
- Debian DEBIAN-CVE-2025-8961 tiff
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report gitlab.com
- report gitlab.com
- report vuldb.com
- report drive.google.com
- web libtiff.org