CVE-2018-8905

Mô tả

Tham khảo

• bugzilla.maptools.org/show_bug.cgi · Exploit
• access.redhat.com/errata/RHSA-2019:2053 · Third Party Advisory
• halfbitteam/POCs · Exploit
• gitlab.com/libtiff/libtiff/commit/58a898cb4459055bb488ca815c23b880c242a27d · Patch
• lists.debian.org/debian-lts-announce/2018/05/msg00008.html · Mailing List
• lists.debian.org/debian-lts-announce/2018/05/msg00009.html · Mailing List
• lists.debian.org/debian-lts-announce/2018/07/msg00002.html · Mailing List
• usn.ubuntu.com/3864-1 · Third Party Advisory
• debian.org/security/2018/dsa-4349 · Third Party Advisory

Lỗ hổng khác của libtiff

• CVE-2026-4775CAO 7.8A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44…
• CVE-2025-61145TRUNG BÌNH 5.0libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
• CVE-2025-61144CAO 7.3libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
• CVE-2025-61143TRUNG BÌNH 5.5libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
• CVE-2025-9165THẤP 2.5A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file …