Buffer overflow in LibTIFF - CVE-2025-8177

Vulnerability identifier: #VU113646

CSH Severity: High

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-8177

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the setrow() function in tools/thumbnail.c. A remote attacker can pass a specially crafted image to the application, trigger memory corruption and execute arbitrary code on the target system.

LibTIFF
SUSE Manager Proxy 4.3
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.3
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Enterprise Micro
Anolis OS
SUSE Enterprise Storage
Ubuntu
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Fedora
tiff (Ubuntu package)
libtiff
libtiff-devel
libtiff-static
libtiff-tools
libtiff (Red Hat package)
tiff
libtiff5-debuginfo
libtiff5
tiff-debuginfo
tiff-debugsource
libtiff5-32bit
libtiff5-debuginfo-32bit
libtiff5-32bit-debuginfo
libtiff-help
libtiff-debugsource
libtiff-debuginfo
libtiff6-64bit
libtiff6-64bit-debuginfo
libtiff-devel-64bit
libtiff-devel-docs
tiff-docs
libtiff6-debuginfo
libtiff6
libtiff6-32bit
libtiff-devel-32bit
libtiff6-32bit-debuginfo

Install updates from vendor's website.

tiff (Ubuntu package) - addressed in versions 4.0.3-7ubuntu0.11+esm15, 4.0.6-1ubuntu0.8+esm18, 4.0.9-5ubuntu0.10+esm8, 4.1.0+git191117-2ubuntu0.20.04.14+esm1, 4.3.0-6ubuntu0.11, 4.5.1+git230720-4ubuntu2.3, 4.5.1+git230720-4ubuntu4.1
libtiff - update to 4.0.3-35
libtiff-devel - update to 4.0.3-35
libtiff-static - update to 4.0.3-35
libtiff-tools - update to 4.0.3-35
libtiff (Red Hat package) - update to 4.0.3-35.el7_9.1
tiff - addressed in versions 4.0.9-44.89.1, 4.7.0-150600.3.13.1
libtiff5-debuginfo - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1
libtiff5 - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1
tiff-debuginfo - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1, 4.7.0-150600.3.13.1
tiff-debugsource - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1, 4.7.0-150600.3.13.1
libtiff5-32bit - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1
libtiff5-debuginfo-32bit - update to 4.0.9-44.89.1
libtiff-devel - addressed in versions 4.0.9-44.89.1, 4.0.9-150000.45.50.1, 4.7.0-150600.3.13.1
libtiff5-32bit-debuginfo - update to 4.0.9-150000.45.50.1
libtiff-help - addressed in versions 4.3.0-25, 4.3.0-39
libtiff-devel - addressed in versions 4.3.0-25, 4.3.0-39
libtiff-debugsource - addressed in versions 4.3.0-25, 4.3.0-39
libtiff-debuginfo - addressed in versions 4.3.0-25, 4.3.0-39
libtiff - addressed in versions 4.3.0-25, 4.3.0-39
libtiff-static - update to 4.3.0-39
libtiff-tools - update to 4.3.0-39
libtiff - addressed in versions 4.7.0-5.fc43, 4.7.0-6.fc42
libtiff6-64bit - update to 4.7.0-150600.3.13.1
libtiff6-64bit-debuginfo - update to 4.7.0-150600.3.13.1
libtiff-devel-64bit - update to 4.7.0-150600.3.13.1
libtiff-devel-docs - update to 4.7.0-150600.3.13.1
tiff-docs - update to 4.7.0-150600.3.13.1
libtiff6-debuginfo - update to 4.7.0-150600.3.13.1
libtiff6 - update to 4.7.0-150600.3.13.1
libtiff6-32bit - update to 4.7.0-150600.3.13.1
libtiff-devel-32bit - update to 4.7.0-150600.3.13.1
libtiff6-32bit-debuginfo - update to 4.7.0-150600.3.13.1

• https://gitlab.com/libtiff/libtiff/-/issues/715
• https://gitlab.com/libtiff/libtiff/-/merge_requests/737
• https://vuldb.com/?ctiid.317591
• https://vuldb.com/?id.317591
• https://gitlab.com/libtiff/libtiff/-/commit/e8c9d6c616b19438695fd829e58ae4fde5bfbc22
• https://vuldb.com/?submit.621797

• Multiple vulnerabilities in LibTIFF
• Fedora 43 update for libtiff
• Fedora 42 update for libtiff
• openEuler 22.03 LTS SP4 update for libtiff
• openEuler 22.03 LTS SP3 update for libtiff
• openEuler 20.03 LTS SP4 update for libtiff
• SUSE update for tiff
• SUSE update for tiff
• SUSE update for tiff
• SUSE update for tiff
• Ubuntu update for tiff
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for libtiff
• Anolis OS update for libtiff