Search

Search is not available in local development.
Run npx pagefind --site __site after building to enable it.

JLSEC-2025-306 Medium 5.5

loadImage() in `tools/tiffcrop.c` in LibTIFF through 4.5.0 has a heap-based use after free via a...

Source Edit History OSV JSON (OSV)

JLSEC Published: Nov 25, 2025
Modified: Jul 23, 2026
Severity: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Packages: Libtiff_jll < 4.5.1+0
Upstream: CVE-2023-26965

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

References