JLSEC-2025-306
NoneCVSS
—
EPSS
—
Published
Nov 25, 2025
CISA due date
—
The record
loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a craft...
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Julia | Libtiff_jll | 0 | 4.5.1+0 |
Related vulnerabilities
- JLSEC-2025-317 A vulnerability was found in LibTIFF up to 4.7.0 Also affects Libtiff_jll
- JLSEC-2025-319 A vulnerability was found in LibTIFF up to 4.7.0 Also affects Libtiff_jll
- JLSEC-2025-255 A flaw was found in libtiff Also affects Libtiff_jll
- JLSEC-2025-263 A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library… Also affects Libtiff_jll
- JLSEC-2025-279 LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905… Also affects Libtiff_jll
- JLSEC-2025-297 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing… Also affects Libtiff_jll
- JLSEC-2025-298 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing… Also affects Libtiff_jll
- JLSEC-2025-312 LibTIFF is vulnerable to an integer overflow Also affects Libtiff_jll