High severity8.8NVD Advisory· Published Jan 12, 2017· Updated May 6, 2026

CVE-2017-5225

Description

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.

Affected products

LibTIFF/Libtiff
cpe:2.3:a:libtiff:libtiff:4.0.7:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/vadz/libtiff/commit/5c080298d59efa53264d7248bbe3a04660db6ef7nvdPatch
bugzilla.maptools.org/show_bug.cginvdExploitIssue Tracking
bugzilla.maptools.org/show_bug.cginvdExploitIssue Tracking
www.securityfocus.com/bid/95413nvdThird Party AdvisoryVDB Entry
www.debian.org/security/2017/dsa-3844nvd
www.securitytracker.com/id/1037911nvd
security.gentoo.org/glsa/201709-27nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000