Medium severity6.5NVD Advisory· Published Jun 26, 2017· Updated Jun 17, 2026

CVE-2017-9937

Description

In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LibTIFF/Libtiff2 versions
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*range: <=4.0.8
- (no CPE)range: = 4.0.8

Patches

Vulnerability mechanics

References

bugzilla.maptools.org/show_bug.cginvdExploitIssue TrackingThird Party Advisory
www.securityfocus.com/bid/99304nvdThird Party AdvisoryVDB Entry
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3Envd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000