← Retour aux CVEs

CVE-2025-8961

LOW

3.3

Description

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.

Details CVE

Score CVSS v3.13.3

SeveriteLOW

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie8/14/2025

Derniere modification9/11/2025

Sourcenvd

Observations honeypot0

Produits affectes

libtiff:libtiff

Faiblesses (CWE)

CWE-119

References

http://www.libtiff.org/(cna@vuldb.com)

https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharing(cna@vuldb.com)

https://gitlab.com/libtiff/libtiff/-/issues/721(cna@vuldb.com)

https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960(cna@vuldb.com)

https://vuldb.com/?ctiid.319955(cna@vuldb.com)

https://vuldb.com/?id.319955(cna@vuldb.com)

https://vuldb.com/?submit.627957(cna@vuldb.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.