LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerS…

Published 9 y ago 2017-01-12 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.8

v3.1 · CNA

CISA KEV

not known exploited

EPSS

4.4%

percentile 91%

Public exploits

none known

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.

CISA SSVC assessment

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 12 mo ago 2025-10-10

Exploit prediction (EPSS)

4.39% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CISA ADP	3.1	8.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
CNA	3.1	8.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`
NVD	3.0	9.8	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

Classification

Weakness

CWE-122 Heap-based Buffer Overflow
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

debian.org /security/2017/dsa-3844 · vendor-advisory, x_refsource_DEBIAN, x_transferred
security.gentoo.org /glsa/201709-27 · vendor-advisory, x_refsource_GENTOO, x_transferred
bugzilla.maptools.org /show_bug.cgi?id=2656 · x_refsource_CONFIRM, x_transferred
bugzilla.maptools.org /show_bug.cgi?id=2657 · x_refsource_CONFIRM, x_transferred
securitytracker.com /id/1037911 · vdb-entry, x_refsource_SECTRACK, x_transferred
securityfocus.com /bid/95413 · vdb-entry, x_refsource_BID, x_transferred
github.com /vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-5225
NVD: CVE-2017-5225

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.