Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-2631

Fixed in a distro release EPSS 3%

LibTIFF 3.9.0 ignores tags in certain situations during the first stage of TIFF file processing and does not properly handle this during the second stage, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.

Published 2010-07-06 · CVE record · OSV

Products: libtiff

Distro releases

ReleasePackageFixed in
Debian 12tiff3.9.4-1
Debian 13tiff3.9.4-1
Debian 14tiff3.9.4-1