Double Free Vulnerability in libtiff Affects Multiple Versions
CVE-2025-61145

5.5MEDIUM

Key Information:

Vendor

libtiff

Status
libtiff
Vendor
CVE Published:
23 February 2026

What is CVE-2025-61145?

A double free vulnerability was identified in libtiff versions up to 4.7.1, found within the 'tools/tiffcrop.c' component. This flaw could allow an attacker to exploit the memory management of the software, potentially leading to application instability or arbitrary code execution. Users of affected versions are advised to update to the latest release to mitigate any risks associated with this vulnerability.

References

https://gitlab.com/libtiff/libtiff/-/issues/736
https://gitlab.com/libtiff/libtiff/-/merge_requests/753
https://gist.github.com/optionGo/062f109569196dbffd8ac120...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.