VULNERABILITY INTELLIGENCE

CVE-2016-3620

CVSS score7.5 HIGH

EPSS probability3.21%

CISA KEVNot currently listed

Published2016-10-03

Last modified2026-06-17

Description

The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attackers to cause a denial of service (buffer over-read) via a crafted BMP image.