PT-2025-32545

CVE-2025-8851

·

Published

2025-01-01

·

Updated

2026-09-02

Description by

CVSS 3.1
5.3
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to 4.5.1
Description: A stack-based buffer overflow issue exists in the tiffcrop component of LibTIFF, specifically within the readSeparateStripsetoBuffer function located in the tools/tiffcrop.c file. Local access is required for exploitation.
Recommendations: Apply the patch identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2025-11161
ALT-PU-2025-11213
ALT-PU-2025-11483
AZL-66258
AZL-66282
CLSA-2026-1787932569
ECHO-0263-9519-53E9
OESA-2025-2048
OESA-2025-2091
OESA-2025-2192
OPENSUSE-SU-2025:15556-1
OPENSUSE-SU-2025:15682-1
OPENSUSE-SU-2026:20995-1
SUSE-SU-2025:3957-1
SUSE-SU-2025_3957-1
SUSE-SU-2025:3989-1
SUSE-SU-2025_3989-1
SUSE-SU-2026:22234-1
SUSE-SU-2026:22306-1
USN-7707-1
Found an issue in the description? Have something to add? Feel free to write us 👾