A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1212 advisory.

    A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file     can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a     denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
    (CVE-2023-1916)

    A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at     tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service     via a crafted tiff file. (CVE-2023-3164)

    A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file     tiffcrop.c of the component tiffcrop. The manipulation leads to memory corruption. The attack needs to be     approached locally. The exploit has been disclosed to the public and may be used. (CVE-2025-8961)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3019 advisory.

    Multiple potential integer overflow in tiffcp.c in libtiff <= 4.5.1 can allow remote attackers to cause a     denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image which     triggers a heap-based buffer overflow. (CVE-2023-40745)

    A vulnerability was identified in LibTIFF 4.7.0. This issue affects the function May of the file     tiffcrop.c of the component tiffcrop. The manipulation leads to memory corruption. The attack needs to be     approached locally. The exploit has been disclosed to the public and may be used. (CVE-2025-8961)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7783-1 advisory.

    Xudong Cao and Yuqing Zhang discovered that LibTIFF incorrectly handled memory when parsing malformed TIFF     images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of     service. (CVE-2025-8961)

    Xudong Cao and Yuqing Zhang discovered that LibTIFF incorrectly handled memory when parsing malformed TIFF     image headers. An attacker could possibly use this issue to cause LibTIFF to leak memory, resulting in a     denial of service. (CVE-2025-9165)

    It was discovered that LibTIFF incorrectly handled memory when parsing malformed TIFF image metadata. An     attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or     execute arbitrary code. (CVE-2025-9900)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03346-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03345-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03348-1 advisory.

    - CVE-2025-9165: local execution manipulation leading to memory leak (bsc#1248330).
    - CVE-2024-13978: null pointer dereference in component fax2ps (bsc#1247581)
    - CVE-2025-8534: null pointer dereference in function PS_Lvl2page (bsc#1247582).
    - CVE-2025-8961: segmentation fault via main function of tiffcrop utility (bsc#1248117).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-bc6408ea0e advisory.

    Automatic update for libtiff-4.7.0-9.fc44.

    ##### **Changelog**

    ```
    * Wed Sep 24 2025 Michal Hlavinka <mhlavink@redhat.com> - 4.7.0-9
    - fix CVE-2025-8961 memory corruption in tiffcrop(rhbz#2388596)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of     the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be     executed locally. The exploit has been made available to the public and could be exploited.
    (CVE-2025-8961)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
270529	Amazon Linux 2023 : libtiff, libtiff-devel, libtiff-static (ALAS2023-2025-1212)	Nessus	Amazon Linux Local Security Checks	medium
270516	Amazon Linux 2 : libtiff, --advisory ALAS2-2025-3019 (ALAS-2025-3019)	Nessus	Amazon Linux Local Security Checks	medium
266308	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : LibTIFF vulnerabilities (USN-7783-1)	Nessus	Ubuntu Local Security Checks	medium
265840	SUSE SLES12 Security Update : tiff (SUSE-SU-2025:03346-1)	Nessus	SuSE Local Security Checks	medium
265837	SUSE SLED15 / SLES15 Security Update : tiff (SUSE-SU-2025:03345-1)	Nessus	SuSE Local Security Checks	medium
265834	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tiff (SUSE-SU-2025:03348-1)	Nessus	SuSE Local Security Checks	medium
265804	Fedora 44 : libtiff (2025-bc6408ea0e)	Nessus	Fedora Local Security Checks	medium
259998	Linux Distros Unpatched Vulnerability : CVE-2025-8961	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-8961

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium