VULNERABILITY INTELLIGENCE

CVE-2016-5652

CVSS score7 HIGH

EPSS probability4.14%

CISA KEVNot currently listed

Published2017-01-06

Last modified2026-06-17

Description

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.