CVE-2025-8961
LibTIFF tiffcrop tiffcrop.c main memory corruption
- State
- Published
- Severity
- 4.8 Medium
- Published
- Aug 14, 2025
- Updated
- Aug 23, 2025
- Reserved
- Aug 13, 2025
Description
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.3 Low | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 1.7 Low | AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
- CWE-119 Memory Corruption
Affected Products
| Product | Versions |
|---|---|
LibTIFFn/a |
|
References
- VDB-319955 | LibTIFF tiffcrop tiffcrop.c main memory corruptionvdb-entrytechnical-description
- VDB-319955 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #627957 | libtiff tiffcrop 4.7.0 (the newest master) Segmentation Faultthird-party-advisory
- https://gitlab.com/libtiff/libtiff/-/issues/721issue-tracking
- https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960issue-tracking
- https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharingexploit
- http://www.libtiff.org/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.