Security
libtiff advisories
The C library that reads and writes TIFF, the format most archival scans are kept in. Pillow, poppler, ImageMagick and nearly everything else decode TIFF through it
3 advisories recorded for libtiff (tiff on Debian); the project is at https://gitlab.com/libtiff/libtiff. Newest first.
| Published | Advisory | Reaches you | What sillybos does |
|---|---|---|---|
| A PixarLog-compressed TIFF overflows a libtiff heap buffer CVE-2026-12912 | by opening a file | Refused by default | |
| A YCbCr TIFF subsampled four to one overflows a libtiff buffer CVE-2026-4775 | by opening a file | Refused by default | |
| A TIFF tag that points past the file makes libtiff allocate for nothing CVE-2023-6277 | by opening a file | Refused by default |
Back to the whole watch.