CVE-2025-8961CWE-119
LibTIFF tiffcrop tiffcrop.c main memory corruption
Medium · published August 14, 2025
What it is
A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00215 · 11.2th percentile
- Weakness
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
- Published
- 2025-08-14T12:02Z
EPSS history
Timeline