CVE-2016-10095

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-10095
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10095.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-10095
Downstream
Related
Published
2017-03-01T15:59:00.290Z
Modified
2026-07-08T12:36:10.485029Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Stack-based buffer overflow in the TIFFVGetField function in tifdir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7 and 4.0.8 allows remote attackers to cause a denial of service (crash) via a crafted TIFF file.

References

Affected packages

Git / github.com/vadz/libtiff

Affected ranges

Type
GIT
Repo
https://github.com/vadz/libtiff
Events
Introduced
b28076b056eba9d665881bab139d21b21137fd2d
Last affected
b28076b056eba9d665881bab139d21b21137fd2d
Database specific 
{
    "cpe": "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.7"
        },
        {
            "last_affected": "4.0.7"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.0.7
Other
Release-v4-0-7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10095.json"

Git / gitlab.com/libtiff/libtiff

Affected ranges

Type
GIT
Repo
https://gitlab.com/libtiff/libtiff
Events
Introduced
884f973652b8b020e533b1e340da3ef4bcd1d925
Last affected
884f973652b8b020e533b1e340da3ef4bcd1d925
Database specific 
{
    "cpe": "cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.7"
        },
        {
            "last_affected": "4.0.7"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.0.7
v4.*
v4.0.7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10095.json"