High severity8.1NVD Advisory· Published Oct 28, 2016· Updated May 6, 2026
CVE-2016-8331
CVE-2016-8331
Description
An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.talosintelligence.com/reports/TALOS-2016-0190/nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/93898nvdThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201701-16nvd
News mentions
0No linked articles in our index yet.