CRITICAL🇵🇱 Wersja polska

CVE-2016-9535

CVSS 9.8v3.0pub. 2016-11-22upd. 2026-05-29

tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Libtiff

    APP
    Libtiff
    4.0.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2016-6223CRITICAL9.1PL ✓same product

Libtiff: odczyt spoza bufora przez ujemny indeks w plikach TIFF

CVE-2016-9533CRITICAL9.8PL ✓same product

LibTIFF: zapis poza buforem sterty w tif_pixarlog.c (PixarLog)

CVE-2016-9536CRITICAL9.8PL ✓same product

Podatność heap buffer overflow w libtiff 4.0.6 (tiff2pdf)

CVE-2016-9534CRITICAL9.8PL ✓same product

libtiff: heap-buffer-overflow w TIFFFlushData1 — błąd ścieżki błędu

CVE-2016-9537CRITICAL9.8PL ✓same product

Out-of-bounds write w libtiff 4.0.6 — narzędzie tiffcrop