High severity8.8NVD Advisory· Published Aug 8, 2018· Updated Jun 17, 2026

CVE-2018-15209

Description

ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIFF file, as demonstrated by tiff2pdf.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords3 versions
pkg:rpm/almalinux/libtiff-tools pkg:rpm/almalinux/libtiff-devel pkg:rpm/almalinux/libtiff
< 4.0.9-32.el8_10+ 2 more
- (no CPE)range: < 4.0.9-32.el8_10
- (no CPE)range: < 4.0.9-32.el8_10
- (no CPE)range: < 4.0.9-32.el8_10
LibTIFF/Libtiffllm-fuzzy2 versions
4.0.9+ 1 more
- (no CPE)range: 4.0.9
- cpe:2.3:a:libtiff:libtiff:4.0.9:*:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugzilla.maptools.org/show_bug.cginvdExploitIssue TrackingThird Party Advisory
www.securityfocus.com/bid/105092nvdThird Party AdvisoryVDB Entry
www.debian.org/security/2018/dsa-4349nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000