Cloudanix VulnDB

CVE-2025-8177

None

CVSS

—

EPSS

0.3%

Published

Jul 26, 2025

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

An old flaw in image-handling software lets someone already on the computer cause problems by feeding it bad image files, but the issue is limited to unsupported versions and has no known attacks.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Low
Impact
Privilege Gain
Component
Library
Class
Buffer Overflow
Remediation
Patch
Effort
Low
Patch risk
Low

What it actually does

Local buffer overflow in the setrow function of tools/thumbnail.c caused by unchecked manipulation of input data, resulting in memory corruption.

Why it matters to the business

On unsupported systems using older LibTIFF versions, local users could trigger crashes or limited code execution when processing TIFF files, though low exploitability and lack of known campaigns reduce overall operational risk; downstream packages like open-webui increase exposure in containerized environments.

How an attack unfolds

An attacker with local system access crafts a malicious TIFF image and invokes the thumbnail generation code path, supplying manipulated data to the setrow function to overflow the buffer and potentially execute arbitrary code or crash the process.

How to fix it

Apply the provided patch e8c9d6c616b19438695fd829e58ae4fde5bfbc22 to LibTIFF or upgrade affected packages to the fixed versions: open-webui (Chainguard/Wolfi) 0.6.22-r1 and open-webui-compat equivalents; migrate away from unsupported LibTIFF releases.

How to confirm the fix worked

Verify installed LibTIFF version is newer than 4.7.0 or confirm presence of the patch commit; test thumbnail generation against known malicious samples in a controlled environment and monitor for buffer-related crashes.

Typical attack path

  1. Gain local access to a system running an affected LibTIFF build
  2. Prepare a specially crafted TIFF file targeting the thumbnail tool
  3. Trigger processing through thumbnail.c to reach the vulnerable setrow function
  4. Exploit the resulting buffer overflow for memory corruption or code execution

How to detect it

Monitor process logs and crash dumps for thumbnail or libtiff-related segmentation faults when handling TIFF files; review local command histories for unusual thumbnail invocations; no widespread exploitation indicators exist given the local-only nature and zero KEV status.

What your security team should do

  • Prioritize upgrading all instances of open-webui and libtiff to the listed fixed versions immediately
  • Remove or isolate any remaining unsupported LibTIFF deployments
  • Review local file processing workflows that invoke thumbnail generation for least-privilege restrictions

The record

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.

Affected packages

Ecosystem Package Introduced Fixed
Chainguard tiff 0 4.7.0-r6
Chainguard tiff-dev 0 4.7.0-r6
Chainguard tiff-doc 0 4.7.0-r6
Debian:11 tiff 0 No fix
Debian:12 tiff 0 No fix
Debian:13 tiff 0 No fix
Debian:14 tiff 0 No fix
Mageia:9 libtiff 0 4.5.1-1.6.mga9
SUSE:Linux Enterprise Module for Basesystem 15 SP6 tiff 0 4.7.0-150600.3.13.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 tiff 0 4.7.0-150600.3.13.1
SUSE:Linux Enterprise Module for Package Hub 15 SP6 tiff 0 4.7.0-150600.3.13.1
SUSE:Linux Enterprise Module for Package Hub 15 SP7 tiff 0 4.7.0-150600.3.13.1
Wolfi tiff 0 4.7.0-r6
Wolfi tiff-dev 0 4.7.0-r6
Wolfi tiff-doc 0 4.7.0-r6
openSUSE:Leap 15.6 tiff 0 4.7.0-150600.3.13.1
openSUSE:Leap 16.0 tiff 0 4.7.1-160000.1.1
openSUSE:Leap 16.0 tiff-man 0 4.7.1-160000.1.1
openSUSE:Tumbleweed tiff 0 4.7.0-7.1

Related vulnerabilities