VULNERABILITY INTELLIGENCE
CVE-2016-9536
CVSS score9.8 CRITICAL
EPSS probability3.14%
CISA KEVNot currently listed
Published2016-11-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-787: Out-of-bounds Write
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory