libtiff
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 356 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 16, 2004 to present
356
Total CVEs
111
Critical+High
0
Exploited
27
Unpatched
Threat Assessment
Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
27
Critical/High
Risk Level
39/100
low
Severity Distribution
Critical
15High
96Medium
215Low
25Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
12Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
127
2
Integer Overflow
38
3
Null Pointer Dereference
25
4
Input Validation
24
5
Divide by Zero
16
Most Affected Products
1. LibTIFF libtiff1253
2. debian/tiff154
3. Debian Debian Linux127
4. IBM Cognos Analytics114
5. Canonical Ubuntu Linux81
Recent Vulnerabilities
See more →REDHAT-BUG-2492871
CVSS 7.0high
6/25/2026🔧 No Patch
CVE-2026-36849
unknown
[CVE-2026-36849] libtiff: Denial of Service via large SamplesPerPixel tag
6/17/2026🔧 No Patch
https://seclists.org/oss-sec/2026/q2/952
unknown
[CVE-2026-36849] libtiff: Denial of Service via large SamplesPerPixel tag
6/17/2026🔧 No Patch
CVE-2026-4775
CVSS 7.8EPSS 0%high
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
3/24/2026
REDHAT-BUG-2450768
CVSS 7.0high
3/24/2026🔧 No Patch
CVE-2025-61144
CVSS 9.8critical
2/23/2026
CVE-2025-61143
CVSS 5.5medium
2/23/2026
CVE-2025-61145
CVSS 5.5medium
2/23/2026🔧 No Patch
https://seclists.org/oss-sec/2025/q3/203
unknown
libtiff 4.7.0: Out-of-Bounds Write in TIFFadRGBAImageOriented() (CVE-2025-9900)
9/26/2025🔧 No Patch
CVE-2025-9900
CVSS 8.8EPSS 0%high
Libtiff: libtiff write-what-where
9/3/2025
Monitor libtiff in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.