JLSEC-2025-314
NoneCVSS
—
EPSS
—
Published
Nov 25, 2025
CISA due date
—
The record
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcro...
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Julia | Libtiff_jll | 0 | 4.6.0+0 |
Related vulnerabilities
- JLSEC-2025-317 A vulnerability was found in LibTIFF up to 4.7.0 Also affects Libtiff_jll
- JLSEC-2025-319 A vulnerability was found in LibTIFF up to 4.7.0 Also affects Libtiff_jll
- JLSEC-2025-255 A flaw was found in libtiff Also affects Libtiff_jll
- JLSEC-2025-263 A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library… Also affects Libtiff_jll
- JLSEC-2025-279 LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905… Also affects Libtiff_jll
- JLSEC-2025-297 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing… Also affects Libtiff_jll
- JLSEC-2025-298 LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing… Also affects Libtiff_jll
- JLSEC-2025-312 LibTIFF is vulnerable to an integer overflow Also affects Libtiff_jll