CVE-2016-3990

概要

参考情報

• bugzilla.maptools.org/show_bug.cgi · Issue Tracking
• lists.opensuse.org/opensuse-updates/2016-09/msg00039.html
• rhn.redhat.com/errata/RHSA-2016-1546.html
• rhn.redhat.com/errata/RHSA-2016-1547.html
• debian.org/security/2017/dsa-3762
• openwall.com/lists/oss-security/2016/04/12/2 · Mailing List
• oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html · Patch
• securityfocus.com/bid/86000 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• security.gentoo.org/glsa/201701-16

libtiff のその他の脆弱性

• CVE-2026-4775高 7.8A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44…
• CVE-2025-61145中 5.0libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
• CVE-2025-61144高 7.3libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
• CVE-2025-61143中 5.5libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
• CVE-2025-9165低 2.5A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file …