Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-9900

Fixed in a distro release EPSS <1%CVSS 8.8

A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to an arbitrary memory location. This memory corruption can be exploited to cause a denial of service (application crash) or to achieve arbitrary code execution with the permissions of the user.

Published 2025-09-23 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat AI Inference Server 3.2, Red Hat Discovery 2, Red Hat Hardened Images, Red Hat Enterprise Linux 6

Distro releases

ReleasePackageFixed in
AlmaLinux 10libtiff4.6.0-6.el10_1.1
AlmaLinux 10libtiff4.6.0-6.el10_0.1
AlmaLinux 10libtiff-devel4.6.0-6.el10_1.1
AlmaLinux 10libtiff-devel4.6.0-6.el10_0.1
AlmaLinux 10libtiff-tools4.6.0-6.el10_1.1
AlmaLinux 10libtiff-tools4.6.0-6.el10_0.1
AlmaLinux 8compat-libtiff33.9.4-14.el8_10
AlmaLinux 8libtiff4.0.9-35.el8_10
AlmaLinux 8libtiff-devel4.0.9-35.el8_10
AlmaLinux 8libtiff-tools4.0.9-35.el8_10
AlmaLinux 8mingw32-libtiff4.0.9-3.el8_10
AlmaLinux 8mingw32-libtiff-static4.0.9-3.el8_10
AlmaLinux 8mingw64-libtiff4.0.9-3.el8_10
AlmaLinux 8mingw64-libtiff-static4.0.9-3.el8_10
AlmaLinux 9libtiff4.4.0-15.el9_7.2
AlmaLinux 9libtiff4.4.0-13.el9_6.2
AlmaLinux 9libtiff-devel4.4.0-15.el9_7.2
AlmaLinux 9libtiff-devel4.4.0-13.el9_6.2
AlmaLinux 9libtiff-tools4.4.0-15.el9_7.2
AlmaLinux 9libtiff-tools4.4.0-13.el9_6.2
Amazon Linux 2compat-libtiff33.9.4-12.amzn2.0.6
Amazon Linux 2libtiff4.0.3-35.amzn2.0.27
Amazon Linux 2libtiff-devel4.0.3-35.amzn2.0.27
Amazon Linux 2libtiff-static4.0.3-35.amzn2.0.27
Amazon Linux 2libtiff-tools4.0.3-35.amzn2.0.27
Amazon Linux 2023libtiff4.4.0-4.amzn2023.0.24
Amazon Linux 2023libtiff-devel4.4.0-4.amzn2023.0.24
Amazon Linux 2023libtiff-static4.4.0-4.amzn2023.0.24
Amazon Linux 2023libtiff-tools4.4.0-4.amzn2023.0.24
Debian 11tiff4.2.0-1+deb11u7
Debian 12tiff4.5.0-6+deb12u3
Debian 13tiff4.7.0-3+deb13u1
Debian 14tiff4.7.1-1
Red Hat Enterprise Linux 10.0libtiff0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.0libtiff-debuginfo0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.0libtiff-debugsource0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.0libtiff-devel0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.0libtiff-tools0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.0libtiff-tools-debuginfo0:4.6.0-6.el10_0.1
Red Hat Enterprise Linux 10.1libtiff0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 10.1libtiff-debuginfo0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 10.1libtiff-debugsource0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 10.1libtiff-devel0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 10.1libtiff-tools0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 10.1libtiff-tools-debuginfo0:4.6.0-6.el10_1.1
Red Hat Enterprise Linux 8compat-libtiff30:3.9.4-14.el8_10
Red Hat Enterprise Linux 8compat-libtiff3-debuginfo0:3.9.4-14.el8_10
Red Hat Enterprise Linux 8compat-libtiff3-debugsource0:3.9.4-14.el8_10
Red Hat Enterprise Linux 8libtiff0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8libtiff-debuginfo0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8libtiff-debugsource0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8libtiff-devel0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8libtiff-tools0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8libtiff-tools-debuginfo0:4.0.9-35.el8_10
Red Hat Enterprise Linux 8mingw-libtiff0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw32-libtiff0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw32-libtiff-debuginfo0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw32-libtiff-static0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw64-libtiff0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw64-libtiff-debuginfo0:4.0.9-3.el8_10
Red Hat Enterprise Linux 8mingw64-libtiff-static0:4.0.9-3.el8_10
Red Hat Enterprise Linux 9libtiff0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff0:4.4.0-13.el9_6.2
Red Hat Enterprise Linux 9libtiff-debuginfo0:4.4.0-13.el9_6.2
Red Hat Enterprise Linux 9libtiff-debuginfo0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff-debugsource0:4.4.0-13.el9_6.2
Red Hat Enterprise Linux 9libtiff-debugsource0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff-devel0:4.4.0-13.el9_6.2
Red Hat Enterprise Linux 9libtiff-devel0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff-tools0:4.4.0-13.el9_6.2
Red Hat Enterprise Linux 9libtiff-tools0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff-tools-debuginfo0:4.4.0-15.el9_7.2
Red Hat Enterprise Linux 9libtiff-tools-debuginfo0:4.4.0-13.el9_6.2
Red Hat hummingbird 1libtiff0:4.7.1-2.1.hum1
Red Hat hummingbird 1libtiff-devel0:4.7.1-2.1.hum1
Red Hat hummingbird 1libtiff-static0:4.7.1-2.1.hum1
Red Hat hummingbird 1libtiff-tools0:4.7.1-2.1.hum1
Red Hat rhel aus 8.2compat-libtiff30:3.9.4-13.el8_2.1
Red Hat rhel aus 8.2libtiff0:4.0.9-17.el8_2.1
Red Hat rhel aus 8.2libtiff-debuginfo0:4.0.9-17.el8_2.1
Red Hat rhel aus 8.2libtiff-debugsource0:4.0.9-17.el8_2.1
Red Hat rhel aus 8.2libtiff-devel0:4.0.9-17.el8_2.1
Red Hat rhel aus 8.2libtiff-tools-debuginfo0:4.0.9-17.el8_2.1
Red Hat rhel aus 8.2spice-client-win0:8.10-3.el8_2.1
Red Hat rhel aus 8.2spice-client-win-x640:8.10-3.el8_2.1
Red Hat rhel aus 8.2spice-client-win-x860:8.10-3.el8_2.1
Red Hat rhel aus 8.4compat-libtiff30:3.9.4-13.el8_4.1
Red Hat rhel aus 8.4libtiff0:4.0.9-18.el8_4.1
Red Hat rhel aus 8.4libtiff-debuginfo0:4.0.9-18.el8_4.1
Red Hat rhel aus 8.4libtiff-debugsource0:4.0.9-18.el8_4.1
Red Hat rhel aus 8.4libtiff-devel0:4.0.9-18.el8_4.1
Red Hat rhel aus 8.4libtiff-tools-debuginfo0:4.0.9-18.el8_4.1
Red Hat rhel aus 8.4spice-client-win0:8.10-3.el8_4.1
Red Hat rhel aus 8.4spice-client-win-x640:8.10-3.el8_4.1
Red Hat rhel aus 8.4spice-client-win-x860:8.10-3.el8_4.1
Red Hat rhel aus 8.6compat-libtiff30:3.9.4-13.el8_6.1
Red Hat rhel aus 8.6libtiff0:4.0.9-21.el8_6.1
Red Hat rhel aus 8.6libtiff-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel aus 8.6libtiff-debugsource0:4.0.9-21.el8_6.1
Red Hat rhel aus 8.6libtiff-devel0:4.0.9-21.el8_6.1
Red Hat rhel aus 8.6libtiff-tools-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel aus 8.6spice-client-win0:8.10-3.el8_6.1
Red Hat rhel aus 8.6spice-client-win-x640:8.10-3.el8_6.1
Red Hat rhel aus 8.6spice-client-win-x860:8.10-3.el8_6.1
Red Hat rhel e4s 8.6compat-libtiff30:3.9.4-13.el8_6.1
Red Hat rhel e4s 8.6libtiff0:4.0.9-21.el8_6.1
Red Hat rhel e4s 8.6libtiff-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel e4s 8.6libtiff-debugsource0:4.0.9-21.el8_6.1
Red Hat rhel e4s 8.6libtiff-devel0:4.0.9-21.el8_6.1
Red Hat rhel e4s 8.6libtiff-tools-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel e4s 8.6spice-client-win0:8.10-3.el8_6.1
Red Hat rhel e4s 8.6spice-client-win-x640:8.10-3.el8_6.1
Red Hat rhel e4s 8.6spice-client-win-x860:8.10-3.el8_6.1
Red Hat rhel e4s 8.8compat-libtiff30:3.9.4-13.el8_8.1
Red Hat rhel e4s 8.8libtiff0:4.0.9-29.el8_8.1
Red Hat rhel e4s 8.8libtiff-debuginfo0:4.0.9-29.el8_8.1
Red Hat rhel e4s 8.8libtiff-debugsource0:4.0.9-29.el8_8.1
Red Hat rhel e4s 8.8libtiff-devel0:4.0.9-29.el8_8.1
Red Hat rhel e4s 8.8libtiff-tools-debuginfo0:4.0.9-29.el8_8.1
Red Hat rhel e4s 8.8spice-client-win0:8.10-3.el8_8.1
Red Hat rhel e4s 8.8spice-client-win-x640:8.10-3.el8_8.1
Red Hat rhel e4s 8.8spice-client-win-x860:8.10-3.el8_8.1
Red Hat rhel e4s 9.0libtiff0:4.2.0-3.el9_0.2
Red Hat rhel e4s 9.0libtiff-debuginfo0:4.2.0-3.el9_0.2
Red Hat rhel e4s 9.0libtiff-debugsource0:4.2.0-3.el9_0.2
Red Hat rhel e4s 9.0libtiff-devel0:4.2.0-3.el9_0.2
Red Hat rhel e4s 9.0libtiff-tools-debuginfo0:4.2.0-3.el9_0.2
Red Hat rhel e4s 9.2libtiff0:4.4.0-8.el9_2.4
Red Hat rhel e4s 9.2libtiff-debuginfo0:4.4.0-8.el9_2.4
Red Hat rhel e4s 9.2libtiff-debugsource0:4.4.0-8.el9_2.4
Red Hat rhel e4s 9.2libtiff-devel0:4.4.0-8.el9_2.4
Red Hat rhel e4s 9.2libtiff-tools-debuginfo0:4.4.0-8.el9_2.4
Red Hat rhel els 7compat-libtiff30:3.9.4-12.el7_9.1
Red Hat rhel els 7libtiff0:4.0.3-35.el7_9.1
Red Hat rhel els 7libtiff-static0:4.0.3-35.el7_9.1
Red Hat rhel els 7libtiff-tools0:4.0.3-35.el7_9.1
Red Hat rhel eus 9.4libtiff0:4.4.0-12.el9_4.4
Red Hat rhel eus 9.4libtiff-debuginfo0:4.4.0-12.el9_4.4
Red Hat rhel eus 9.4libtiff-debugsource0:4.4.0-12.el9_4.4
Red Hat rhel eus 9.4libtiff-devel0:4.4.0-12.el9_4.4
Red Hat rhel eus 9.4libtiff-tools0:4.4.0-12.el9_4.4
Red Hat rhel eus 9.4libtiff-tools-debuginfo0:4.4.0-12.el9_4.4
Red Hat rhel eus long life 8.4compat-libtiff30:3.9.4-13.el8_4.1
Red Hat rhel eus long life 8.4libtiff0:4.0.9-18.el8_4.1
Red Hat rhel eus long life 8.4libtiff-debuginfo0:4.0.9-18.el8_4.1
Red Hat rhel eus long life 8.4libtiff-debugsource0:4.0.9-18.el8_4.1
Red Hat rhel eus long life 8.4libtiff-devel0:4.0.9-18.el8_4.1
Red Hat rhel eus long life 8.4libtiff-tools-debuginfo0:4.0.9-18.el8_4.1
Red Hat rhel eus long life 8.4spice-client-win0:8.10-3.el8_4.1
Red Hat rhel eus long life 8.4spice-client-win-x640:8.10-3.el8_4.1
Red Hat rhel eus long life 8.4spice-client-win-x860:8.10-3.el8_4.1
Red Hat rhel tus 8.6compat-libtiff30:3.9.4-13.el8_6.1
Red Hat rhel tus 8.6libtiff0:4.0.9-21.el8_6.1
Red Hat rhel tus 8.6libtiff-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel tus 8.6libtiff-debugsource0:4.0.9-21.el8_6.1
Red Hat rhel tus 8.6libtiff-devel0:4.0.9-21.el8_6.1
Red Hat rhel tus 8.6libtiff-tools-debuginfo0:4.0.9-21.el8_6.1
Red Hat rhel tus 8.6spice-client-win0:8.10-3.el8_6.1
Red Hat rhel tus 8.6spice-client-win-x640:8.10-3.el8_6.1
Red Hat rhel tus 8.6spice-client-win-x860:8.10-3.el8_6.1
Red Hat rhel tus 8.8compat-libtiff30:3.9.4-13.el8_8.1
Red Hat rhel tus 8.8libtiff0:4.0.9-29.el8_8.1
Red Hat rhel tus 8.8libtiff-debuginfo0:4.0.9-29.el8_8.1
Red Hat rhel tus 8.8libtiff-debugsource0:4.0.9-29.el8_8.1
Red Hat rhel tus 8.8libtiff-devel0:4.0.9-29.el8_8.1
Red Hat rhel tus 8.8libtiff-tools-debuginfo0:4.0.9-29.el8_8.1
Red Hat rhel tus 8.8spice-client-win0:8.10-3.el8_8.1
Red Hat rhel tus 8.8spice-client-win-x640:8.10-3.el8_8.1
Red Hat rhel tus 8.8spice-client-win-x860:8.10-3.el8_8.1
Rocky Linux 10libtiff0:4.6.0-6.el10_0.1
Rocky Linux 8compat-libtiff30:3.9.4-14.el8_10
Rocky Linux 8libtiff0:4.0.9-35.el8_10
Rocky Linux 8mingw-libtiff0:4.0.9-3.el8_10
Rocky Linux 9libtiff0:4.4.0-15.el9_7.2.0.1
Rocky Linux 9libtiff0:4.4.0-13.el9_6.2
SUSE Enterprise Storage 7.1tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Micro 5.2tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Micro 5.3tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Micro 5.4tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Micro 5.5tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Module for Basesystem 15 SP6tiff4.7.1-150600.3.23.1
SUSE Linux Enterprise Module for Basesystem 15 SP6tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Module for Basesystem 15 SP7tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Module for Basesystem 15 SP7tiff4.7.1-150600.3.23.1
SUSE Linux Enterprise Module for Package Hub 15 SP6tiff4.7.1-150600.3.23.1
SUSE Linux Enterprise Module for Package Hub 15 SP7tiff4.7.1-150600.3.23.1
SUSE Linux Enterprise Server 12 SP5-LTSStiff4.0.9-44.97.1
SUSE Linux Enterprise Server 15 SP3-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server 15 SP4-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server 15 SP5-LTSStiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server 16.0tiff4.7.1-160000.1.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5tiff4.0.9-44.97.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5tiff4.0.9-150000.45.60.1
SUSE Linux Enterprise Server for SAP applications 16.0tiff4.7.1-160000.1.1
SUSE Linux Micro 6.0tiff4.7.1-1.1
SUSE Linux Micro 6.1tiff4.7.1-slfo.1.1_1.1
SUSE Linux Micro 6.2tiff4.7.1-160000.1.1
SUSE Manager Proxy LTS 4.3tiff4.0.9-150000.45.60.1
SUSE Manager Server LTS 4.3tiff4.0.9-150000.45.60.1
Ubuntu 22.04 LTStiff4.3.0-6ubuntu0.12
Ubuntu 24.04 LTStiff4.5.1+git230720-4ubuntu2.4
Ubuntu 25.10qtwebengine-opensource-srcno fix
Ubuntu 25.10texmakerno fix
Ubuntu 25.10tiff4.7.0-3ubuntu3
Ubuntu 26.04 LTStiff4.7.0-3ubuntu3
Ubuntu 26.10qtwebengine-opensource-srcno fix
Ubuntu Pro 14.04 LTSgdal1.10.1+dfsg-5ubuntu1+esm2
Ubuntu Pro 14.04 LTStiff4.0.3-7ubuntu0.11+esm16
Ubuntu Pro 16.04 LTSgdal1.11.3+dfsg-3ubuntu0.1~esm1
Ubuntu Pro 16.04 LTStiff4.0.6-1ubuntu0.8+esm19
Ubuntu Pro 18.04 LTSqtwebengine-opensource-src5.9.5+dfsg-0ubuntu2+esm1
Ubuntu Pro 18.04 LTStexmaker5.0.2-1ubuntu0.1~esm1
Ubuntu Pro 18.04 LTStiff4.0.9-5ubuntu0.10+esm9
Ubuntu Pro 20.04 LTSqtwebengine-opensource-src5.12.8+dfsg-0ubuntu1.1+esm1
Ubuntu Pro 20.04 LTStexmaker5.0.3-1ubuntu0.20.04.1~esm1
Ubuntu Pro 20.04 LTStiff4.1.0+git191117-2ubuntu0.20.04.14+esm2
Ubuntu Pro 22.04 LTSqtwebengine-opensource-src5.15.9+dfsg-1ubuntu0.1~esm1
Ubuntu Pro 22.04 LTStexmaker5.0.3-1ubuntu0.22.04.1~esm1
Ubuntu Pro 24.04 LTSqtwebengine-opensource-src5.15.16+dfsg-3ubuntu0.1~esm1
Ubuntu Pro 24.04 LTStexmaker5.1.3+dfsg-1ubuntu0.1~esm1
Ubuntu Pro 26.04 LTSqtwebengine-opensource-src5.15.19+dfsg2-4ubuntu0.1~esm1
openSUSE Leap 15.6tiff4.7.1-150600.3.23.1
openSUSE Leap 16.0tiff4.7.1-160000.1.1
openSUSE Leap 16.0tiff-man4.7.1-160000.1.1
openSUSE Tumbleweedtiff4.7.1-2.1