CVE-2016-10268

tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.

• CWE-191

• http://www.securityfocus.com/bid/97202
• https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory, VDB Entry
• https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e652a1f409ec3b9dfIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201709-27
• https://usn.ubuntu.com/3602-1/
• http://www.securityfocus.com/bid/97202
• https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory, VDB Entry
• https://github.com/vadz/libtiff/commit/5397a417e61258c69209904e652a1f409ec3b9dfIssue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201709-27
• https://usn.ubuntu.com/3602-1/

Published

Mar 24, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10257The Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 (pri…
• CVE-2016-10258Unrestricted file upload vulnerability in the Symantec Advan…
• CVE-2016-10259Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.1…
• CVE-2016-1026Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8
• CVE-2016-10266LibTIFF 4.0.7 allows remote attackers to cause a denial of s…
• CVE-2016-10267LibTIFF 4.0.7 allows remote attackers to cause a denial of s…
• CVE-2016-10269LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4…
• CVE-2016-1027Adobe Flash Player before 18.0.0.343 and 19.x through 21.x b…8.8
• CVE-2016-10270LibTIFF 4.0.7 allows remote attackers to cause a denial of s…
• CVE-2016-10271tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to…
• CVE-2016-10272LibTIFF 4.0.7 allows remote attackers to cause a denial of s…
• CVE-2016-10273Multiple stack buffer overflow vulnerabilities in Jensen of …8.8