A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-419c60783f advisory.

    Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-13b23a6952 advisory.

    Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the     function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null     pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is     rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and     may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply     a patch to fix this issue. One of the maintainers explains, that '[t]his error only occurs if     DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. 'rD') option is used.'(CVE-2025-8534)

    A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function     readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads     to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified     as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this     issue.(CVE-2025-8851)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this     issue.(CVE-2024-13978)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the     function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to     be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to     apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by     the maintainer.(CVE-2025-8177)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libtiff security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20049-1 advisory.

    tiff was updated to 4.7.1:

    * Software configuration changes:

      * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
      * CMake: define WORDS_BIGENDIAN via tif_config.h
      * doc/CMakeLists.txt: remove useless cmake_minimum_required()
      * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
      * CMake: set CMP0074 new policy
      * Set LINKER_LANGUAGE for C targets with C deps
      * Export tiffxx cmake target (fixes issue #674)
      * autogen.sh: Enable verbose wget.
      * configure.ac: Syntax updates for Autoconf 2.71
      * autogen.sh: Re-implement based on autoreconf. Failure to update         config.guess/config.sub does not return error (fixes issue #672)
      * CMake: fix CMake 4.0 warning when minimum required version is < 3.10.
      * CMake: Add build option tiff-static (fixes issue #709)       Library changes:
      * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control         about emitting warnings for unknown tags. No longer emit warnings         about unknown tags by default
      * tif_predict.c: speed-up decompression in some cases.

    * Bug fixes:

      * tif_fax3: For fax group 3 data if no EOL is detected, reading is         retried without synchronisation for EOLs. (fixes issue #54)
      * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for         FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for         FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
      * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in         the DNG 1.7 specification
      * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags         defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
      * Do not error out on a tag whose tag count value is zero, just issue a warning.
        Fix parsing a private tag 0x80a6 (fixes issue #647)
      * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24         Fixes https://github.com/OSGeo/gdal/issues/10875)
      * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
      * Fix writing a Predictor=3 file with non-native endianness
      * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
      * read / nullptr dereference) in case of out-of-memory situation when dealing with         custom tags (fixes issue #663)
      * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and         PlanarConfiguration = Contiguous (fixes issue #26)
      * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code         words have been reached. (fixes issue #670)
      * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
      * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
        -DZ_SOLO inflating will fail.
      * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
      * tif_predict.c: Dont overwrite input buffer of TIFFWriteScanline() if prediction         is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
      * tif_getimage.c: update some integer overflow checks (fixes issue #79)
      * tif_getimage.c: Fix buffer underflow crash for less raster rows at         TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
      * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
      * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()         if HAVE_IEEEFP is not defined. (fixes issue #699)
      * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker         has been found with remaining output bytes (fixes issue #698)
      * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
      * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing         tif_rawdata (fixes issue #711)
      * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid         out-of-bounds access (fixes issue #714)
      * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit         dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
        Fixes issue #717
      * add assert for TIFFReadCustomDirectory infoarray check.
      * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line         were written wrongly. (fixes issue #467)
      * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where         TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
      * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
      * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
        Fixes issue #654
      * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
      * Improve non-secure integer overflow check (comparison of division result with         multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
        Fixes issue #546
      * tiff2rgba: fix some a partial expression can generate an overflow before it is         assigned to a broader type warnings. (fixes issue #682)
      * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
      * tiffdither: avoid out-of-bounds read identified in issue #733
      * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
      * tiffmedian: close input file. (fixes issue #735)
      * thumbail: avoid potential out of bounds access (fixes issue #715)
      * tiffcrop: close open TIFF files and release allocated buffers before exiting in case         of error to avoid memory leaks. (fixes issue #716)
      * tiffcrop: fix double-free and memory leak exposed by issue #721
      * tiffcrop: avoid buffer overflow. (fixes issue #740)
      * tiffcrop: avoid nullptr dereference. (fixes issue #734)
      * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem         to PrintData, which uses it as a divisor or modulus.
      * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and         TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
      * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
      * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
      * raw2tiff: close input file before exit (fixes issue #742)       Tools changes:
      * tiffinfo: add a -W switch to warn about unknown tags.
      * tiffdither: process all pages in input TIFF file.

    * Documentation:

      * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation         from 5 (LeftTop) to 8 (LeftBottom) in the raster.
      * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
      * Update Defining New TIFF Tags description. (fixes issue #642)
      * Fix return type of TIFFReadEncodedTile()
      * Update the documentation to reflect deprecated typedefs.
      * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image         data and not for IFD data.
      * Update documentation on re-entrancy and thread safety.
      * Remove dead links to no more existing Awaresystems web-site.
      * Updating BigTIFF specification and some miscelaneous editions.
      * Replace some last links and remove last todos.
      * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its         associated buffers. (fixes issue #681)
      * Added chapter to Using the TIFF Library with links to handling multi-page TIFF         and custom directories. (fixes issue #43)
      * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)

    Security issues fixed:

      * CVE-2025-8961: Fix segmentation fault via main function of tiffcrop utility [bsc#1248117]
      * CVE-2025-8534: Fix null pointer dereference in function PS_Lvl2page [bsc#1247582]
      * CVE-2025-9165: Fix local execution manipulation can lead to memory leak [bsc#1248330]
      * CVE-2024-13978: Fix null pointer dereference in tiff2pdf [bsc#1247581]
      * CVE-2025-8176: Fix heap use-after-free in tools/tiffmedian.c [bsc#1247108]
      * CVE-2025-8177: Fix possible buffer overflow in tools/thumbnail.c:setrow()  [bsc#1247106]

    - Fix TIFFMergeFieldInfo() read_count=write_count=0 (bsc#1243503)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the     function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null     pointer dereference. It is possible to launch the attack on the local host. The complexity of an attack is     rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and     may be used. The name of the patch is 6ba36f159fd396ad11bf6b7874554197736ecc8b. It is recommended to apply     a patch to fix this issue. One of the maintainers explains, that '[t]his error only occurs if     DEFER_STRILE_LOAD (defer-strile-load:BOOL=ON) or TIFFOpen( .. 'rD') option is used.'(CVE-2025-8534)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this     issue.(CVE-2024-13978)

    A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function     readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads     to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified     as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this     issue.(CVE-2025-8851)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the     function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to     be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to     apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by     the maintainer.(CVE-2025-8177)

    A flaw has been found in LibTIFF 4.7.0. This affects the function
    _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component     tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This     attack is characterized by high complexity. It is indicated that the exploitability is difficult. The     exploit has been published and may be used. There is ongoing doubt regarding the real existence of this     vulnerability. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply     a patch to resolve this issue. A researcher disputes the security impact of this issue, because 'this is a     memory leak on a command line tool that is about to exit anyway'. In the reply the project maintainer     declares this issue as 'a simple 'bug' when leaving the command line tool and (...) not a security issue     at all'.(CVE-2025-9165)

    A flaw was found in Libtiff. This vulnerability is a 'write-what-where' condition, triggered when the     library processes a specially crafted TIFF image file. By providing an abnormally large image height value     in the file's metadata, an attacker can trick the library into writing attacker-controlled color data to     an arbitrary memory location. This memory corruption can be exploited to cause a denial of service     (application crash) or to achieve arbitrary code execution with the permissions of the     user.(CVE-2025-9900)

Tenable has extracted the preceding description block directly from the EulerOS libtiff security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this     issue.(CVE-2024-13978)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the     function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to     be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to     apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by     the maintainer.(CVE-2025-8177)

Tenable has extracted the preceding description block directly from the EulerOS libtiff security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the     function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to     be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to     apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by     the maintainer.(CVE-2025-8177)

    A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this     issue.(CVE-2024-13978)

Tenable has extracted the preceding description block directly from the EulerOS libtiff security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984792 advisory.

    A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4315 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4315-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Jochen Sprickerhof     September 30, 2025                            https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : tiff     Version        : 4.2.0-1+deb11u7     CVE ID         : CVE-2024-13978 CVE-2025-9900     Debian Bug     :

    Multiple vulnerabilities were fixed in tiff, a library and tools     providing support for the Tag Image File Format (TIFF).

    CVE-2024-13978

        Affected by this vulnerability is the function t2p_read_tiff_init of         the file tools/tiff2pdf.c of the component fax2ps. The manipulation         leads to null pointer dereference. The attack needs to be approached         locally. The complexity of an attack is rather high. The exploitation         appears to be difficult.

    CVE-2025-9900

        This vulnerability is a write-what-where condition, triggered         when the library processes a specially crafted TIFF image file.
        By providing an abnormally large image height value in the file's         metadata, an attacker can trick the library into writing         attacker-controlled color data to an arbitrary memory location.
        This memory corruption can be exploited to cause a denial of         service (application crash) or to achieve arbitrary code execution         with the permissions of the user.

    For Debian 11 bullseye, these problems have been fixed in version     4.2.0-1+deb11u7.

    We recommend that you upgrade your tiff packages.

    For the detailed security status of tiff please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/tiff

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03348-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2024-13978: null pointer dereference in component fax2ps (bsc#1247581)
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5869edf3de advisory.

    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)


    ----

    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-c612cbc58f advisory.

    Automatic update for libtiff-4.7.0-8.fc44.

    ##### **Changelog**

    ```
    * Mon Aug 25 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-8
    - fix  CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
    * Tue Aug 12 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ebff4d54bf advisory.

    Automatic update for libtiff-4.7.0-8.fc43.

    ##### **Changelog**

    ```
    * Mon Aug 25 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-8
    - fix  CVE-2025-9165: memory leak in tiffcmp (rhbz#2389608)
    * Tue Aug 12 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-7
    - fix CVE-2024-13978: null pointer dereference in tiff2pdf (rhbz#2386201)
    - fix CVE-2025-8534: null pointer dereference in tiff2ps (rhbz#2386494)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this     vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The     manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity     of an attack is rather high. The exploitation appears to be difficult. The patch is named     2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.
    (CVE-2024-13978)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a78662be2c advisory.

    - fixes CVE-2025-8534: null pointer dereference in tiff2p
    - fixes CVE-2024-13978: null pointer dereference in tiff2pdf


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
280111	Fedora 42 : tkimg (2025-419c60783f)	Nessus	Fedora Local Security Checks	critical
280109	Fedora 43 : tkimg (2025-13b23a6952)	Nessus	Fedora Local Security Checks	critical
279326	EulerOS Virtualization 2.13.1 : libtiff (EulerOS-SA-2025-2550)	Nessus	Huawei Local Security Checks	medium
279292	EulerOS Virtualization 2.13.0 : libtiff (EulerOS-SA-2025-2585)	Nessus	Huawei Local Security Checks	medium
276606	openSUSE 16 Security Update : tiff (openSUSE-SU-2025-20049-1)	Nessus	SuSE Local Security Checks	medium
274955	EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2025-2333)	Nessus	Huawei Local Security Checks	medium
274945	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2025-2421)	Nessus	Huawei Local Security Checks	medium
274929	EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2025-2393)	Nessus	Huawei Local Security Checks	medium
274846	EulerOS 2.0 SP12 : libtiff (EulerOS-SA-2025-2364)	Nessus	Huawei Local Security Checks	medium
271315	EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2025-2300)	Nessus	Huawei Local Security Checks	medium
271311	EulerOS 2.0 SP13 : libtiff (EulerOS-SA-2025-2268)	Nessus	Huawei Local Security Checks	medium
270039	EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2025-2234)	Nessus	Huawei Local Security Checks	medium
270014	EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2025-2202)	Nessus	Huawei Local Security Checks	medium
267378	Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-984792)	Nessus	Unity Linux Local Security Checks	low
266296	Debian dla-4315 : libtiff-dev - security update	Nessus	Debian Local Security Checks	low
265834	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tiff (SUSE-SU-2025:03348-1)	Nessus	SuSE Local Security Checks	medium
258026	Fedora 41 : libtiff (2025-5869edf3de)	Nessus	Fedora Local Security Checks	low
254437	Fedora 44 : libtiff (2025-c612cbc58f)	Nessus	Fedora Local Security Checks	low
254436	Fedora 43 : libtiff (2025-ebff4d54bf)	Nessus	Fedora Local Security Checks	low
252700	Linux Distros Unpatched Vulnerability : CVE-2024-13978	Nessus	Misc.	low
249974	Fedora 42 : libtiff (2025-a78662be2c)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2024-13978

low

Tenable Plugins

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

low

low

medium

low

low

low

low

low