CVE-2020-35524

概要

参考情報

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• gitlab.com/libtiff/libtiff/-/merge_requests/159 · Patch
• gitlab.com/rzkn/libtiff/-/commit/7be2e452ddcf6d7abca88f41d3761e6edab72b22 · Patch
• lists.debian.org/debian-lts-announce/2021/06/msg00023.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BMHBYFMX3D5VGR6Y3RXTTH3Q4NF4E6IG
• security.gentoo.org/glsa/202104-06 · Third Party Advisory
• security.netapp.com/advisory/ntap-20210521-0009 · Third Party Advisory
• debian.org/security/2021/dsa-4869 · Third Party Advisory

libtiff のその他の脆弱性

• CVE-2026-4775高 7.8A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44…
• CVE-2025-61145中 5.0libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
• CVE-2025-61144高 7.3libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
• CVE-2025-61143中 5.5libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
• CVE-2025-9165低 2.5A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file …