tiff (SUSE:Linux Micro 6.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.0 package tiff, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2025-9900 — CVSS 8.8 (high): A flaw was found in Libtiff. This vulnerability is a "write-what-where" condition, triggered when the library processes a specially crafted…
• CVE-2024-7006 — CVSS 7.5 (high): A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation…
• CVE-2023-52356 — CVSS 7.5 (high): A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API…
• CVE-2025-8176 — CVSS 5.3 (medium): A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram…
• CVE-2025-8177 — CVSS 5.3 (medium): A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file…
• CVE-2025-8961 — CVSS 3.3 (low): A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing…
• CVE-2025-8534 — CVSS 2.5 (low): A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file…
• CVE-2025-9165 — CVSS 2.5 (low): A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file…
• CVE-2024-13978 — CVSS 2.5 (low): A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function…