← All advisories

High severity7.3NVD Advisory· Published Feb 23, 2026· Updated Jun 17, 2026

CVE-2025-61144

CVE-2025-61144

Description

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

LibTIFF/Libtiff3 versions
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*range: <4.7.1
- (no CPE)
- (no CPE)range: <=4.7.1
osv-coords6 versions
pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7 pkg:rpm/suse/tiff&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 4.0.9-150000.45.63.1+ 5 more
- (no CPE)range: < 4.0.9-150000.45.63.1
- (no CPE)range: < 4.0.9-150000.45.63.1
- (no CPE)range: < 4.0.9-150000.45.63.1
- (no CPE)range: < 4.0.9-150000.45.63.1
- (no CPE)range: < 4.0.9-150000.45.63.1
- (no CPE)range: < 4.0.9-44.109.1

Patches

Vulnerability mechanics

References

5

gitlab.com/libtiff/libtiff/-/commit/09f53a86cf26dfd961925227e59e180db617f26dnvdPatch
gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aanvdPatch
gitlab.com/libtiff/libtiff/-/issues/740nvdExploitIssue Tracking
gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952nvdThird Party Advisory
gitlab.com/libtiff/libtiff/-/merge_requests/757nvdIssue Tracking

News mentions

0

No linked articles in our index yet.