Search CVE reports


Toggle filters

11 – 20 of 28 results


CVE-2025-61144

Low priority

Some fixes available 7 of 24

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Vulnerable Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Not affected Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-61143

Low priority

Some fixes available 7 of 24

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Vulnerable Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Not affected Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-9900

High priority

Some fixes available 9 of 24

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Fixed Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable
texmaker Not affected Vulnerable Vulnerable Vulnerable Vulnerable
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-9165

Low priority

Some fixes available 9 of 29

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak....

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Fixed Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-8961

Low priority
Fixed

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The...

5 affected packages

qtwebengine-opensource-src, texmaker, gdal, neuron, tiff

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
qtwebengine-opensource-src Not affected Not affected Not affected Not affected
texmaker Not affected Not affected Not affected Not affected
gdal Not affected Not affected Not affected Not affected
neuron Not affected Not affected Not affected Not affected
tiff Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-8851

Medium priority

Some fixes available 7 of 27

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Not affected Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-8534

Medium priority

Some fixes available 9 of 29

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It...

5 affected packages

gdal, texmaker, tiff, qtwebengine-opensource-src, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gdal Not affected Not affected Not affected Not affected Not affected
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
tiff Fixed Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-13978

Medium priority

Some fixes available 2 of 22

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
tiff Fixed Not affected Not affected Not affected Not affected
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
gdal Not affected Not affected Not affected Not affected Not affected
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-29480

Medium priority
Ignored

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced.

1 affected package

gdal

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gdal Ignored Ignored Ignored Ignored
Show less packages

CVE-2024-7006

Medium priority

Some fixes available 10 of 32

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults,...

5 affected packages

gdal, tiff, qtwebengine-opensource-src, texmaker, neuron

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gdal Not affected Not affected Not affected Not affected Not affected
tiff Fixed Fixed Fixed Fixed Fixed
qtwebengine-opensource-src Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
texmaker Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
neuron Not affected Not affected Needs evaluation Needs evaluation Needs evaluation
Show less packages