CVE-2016-3945
libtiff: out-of-bounds write in the tiff2rgba tool
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · April 8, 2016
Updated · November 21, 2025
Description
Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 5.3CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 2.0 · 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-787 · Out-of-bounds Write