CVE-2016-10094 — Off-by-one Error in Libtiff

CWE-189CWE-193 — Off-by-one ErrorCWE-122 — Heap-based Buffer Overflow12 documents8 sources
Severity
7.8HIGHNVD
EPSS
0.8%
top 25.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian TiffLibtiff
Timeline
PublishedMar 1
Latest updateJan 31

Description

Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDlibtiff/libtiff4.0.7
▶debiandebian/tiff< tiff 4.0.7-4 (bookworm)

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-9229-rpm9-cwh4: Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf↗2022-05-17
▶
OSV
CVE-2016-10094: Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf↗2017-03-01
▶

📋Vendor Advisories

3
Ubuntu
LibTIFF vulnerabilities↗2017-02-27
▶
Red Hat
libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow↗2016-12-20
▶
Debian
CVE-2016-10094: tiff - Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf....↗2016
▶

📄Research Papers

2
arXiv
SoK: Towards Effective Automated Vulnerability Repair↗2025-01-31
▶
arXiv
RCABench: Open Benchmarking Platform for Root Cause Analysis↗2023-03-10
▶

💬Community

4
Bugzilla
CVE-2016-10094 libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 mingw-libtiff: various flaws [epel-7]↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 mingw-libtiff: various flaws [fedora-all]↗2017-01-04
▶
Bugzilla
CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2017-5225 CVE-2017-5563 libtiff: various flaws [fedora-all]↗2017-01-04
▶