CVE-2016-3632: libtiff Out-of-bounds Write

EPSS trend

Probability

3.25%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

+0.13 pp

From 3.12% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.25%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlX Refsource CONFIRMPatchThird Party Advisory
rhn.redhat.com/errata/RHSA-2016-1547.htmlVendor AdvisoryX Refsource REDHAT
bugzilla.maptools.org/show_bug.cgi?id=2549X Refsource CONFIRMIssue Tracking
www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.htmlX Refsource CONFIRM
www.openwall.com/lists/oss-security/2016/04/08/9Mailing ListX Refsource MLISTThird Party AdvisoryREPORT
www.securityfocus.com/bid/85953VDB EntryX Refsource BID
security.gentoo.org/glsa/201701-16Vendor AdvisoryX Refsource GENTOO
rhn.redhat.com/errata/RHSA-2016-1546.htmlVendor AdvisoryX Refsource REDHAT
www.securityfocus.com/bid/85960VDB EntryX Refsource BIDThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1325095X Refsource CONFIRMIssue Tracking

Show all 15 references

ubuntu.com/security/CVE-2016-3632REPORT
ubuntu.com/security/notices/USN-3212-1Advisory
ubuntu.com/security/notices/USN-3212-3Advisory
www.cve.org/CVERecord?id=CVE-2016-3632REPORT
security-tracker.debian.org/tracker/CVE-2016-3632Advisory

Related vulnerabilities

CVE-2018-5360debiantiff+31.82%8y ago14-01-2018 02:00LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.CVE-2018-10963alpinetiff+53.64%8y ago10-05-2018 02:00The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.CVE-2013-1620canonicalubuntu_linux+153.72%13y ago08-02-2013 19:00The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.CVE-2013-0791canonicalubuntu_linux+125.21%13y ago03-04-2013 10:00The CERT_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, SeaMonkey before 2.17, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted certificate.CVE-2013-4231debiantiff+27.40%12y ago19-01-2014 15:00Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to tools/gif2tiff.c or (3) a long filename for a TIFF image to tools/rgb2ycbcr.c. NOTE: vectors 1 and 3 are disputed by Red Hat, which states that the input cannot exceed the allocated buffer size.CVE-2013-4243debiantiff+57.17%13y ago10-09-2013 19:00Heap-based buffer overflow in the readgifimage function in the gif2tiff tool in libtiff 4.0.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted height and width values in a GIF image.

All vulnerabilities inlibtiff vm_server

CVE-2016-3632: libtiff Out-of-bounds Write

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References