CVE-2014-8129

N/A
Published: March 12, 2018 at 02:00 AM UTC
Updated: June 17, 2026 at 12:16 AM UTC
8 products affected across 4 vendorsmacOSDebian LinuxiPhone OS

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%

Description

LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by failure of tif_next.c to verify that the BitsPerSample value is 2, and the t2p_sample_lab_signed_to_unsigned function in tiff2pdf.c.

Affected

References (15)

x_refsource_MISCExploitIssue Tracking
http://bugzilla.maptools.org/show_bug.cgi?id=2487
x_refsource_MISCExploitIssue Tracking
http://bugzilla.maptools.org/show_bug.cgi?id=2488
x_refsource_MISCVendor Advisoryx_refsource_APPLEMailing List
http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
x_refsource_MISCVendor Advisoryx_refsource_APPLEMailing List
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
x_refsource_MISCMailing Listx_refsource_MLIST
http://openwall.com/lists/oss-security/2015/01/24/15
Vendor Advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1546.html
Vendor Advisoryx_refsource_REDHATThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-1547.html
x_refsource_MISCx_refsource_CONFIRMThird Party Advisory
http://support.apple.com/kb/HT204941

CVSS

Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card