Heap-based Buffer Overflow in LibTIFF's tiffcrop Tool
CVE-2016-3991

7.8HIGH

Key Information:

Vendor: Oracle
Status: Vm Server
Vendor: CVE Published:; 21 September 2016

What is CVE-2016-3991?

A vulnerability exists in the loadImage function of the tiffcrop tool in LibTIFF versions 4.0.6 and earlier. This flaw allows remote attackers to exploit a crafted TIFF image that contains zero tiles. By doing so, they can trigger an out-of-bounds write, which may result in the application crashing or executing arbitrary code. This issue has significant implications for system security, particularly in environments where untrusted images are processed.