Search

Search is not available in local development.
Run npx pagefind --site __site after building to enable it.

JLSEC-2025-306

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a craft...

Source Edit History OSV JSON (OSV)

JLSEC Published: Nov 25, 2025
Modified: Nov 25, 2025
Affected Packages: Libtiff_jll < 4.5.1+0
Aliases / Upstream: CVE-2023-26965

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

References