CVE-2025-8961
LibTIFF tiffcrop tiffcrop.c main memory corruption
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 ago 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
n/a · LibTIFFReferencias
https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharinghttps://gitlab.com/libtiff/libtiff/-/issues/721https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960https://vuldb.com/?ctiid.319955https://vuldb.com/?id.319955https://vuldb.com/?submit.627957http://www.libtiff.org/