CVE-2016-3945

Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted TIFF image, which triggers an out-of-bounds write.

• CWE-190
• CWE-787

• http://bugzilla.maptools.org/show_bug.cgi?id=2545Issue Tracking
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html
• http://rhn.redhat.com/errata/RHSA-2016-1546.html
• http://rhn.redhat.com/errata/RHSA-2016-1547.html
• http://www.debian.org/security/2017/dsa-3762
• http://www.openwall.com/lists/oss-security/2016/04/08/6Mailing List, Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/85960Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1325093Issue Tracking
• https://security.gentoo.org/glsa/201701-16
• http://bugzilla.maptools.org/show_bug.cgi?id=2545Issue Tracking
• http://lists.opensuse.org/opensuse-updates/2016-09/msg00039.html
• http://rhn.redhat.com/errata/RHSA-2016-1546.html
• http://rhn.redhat.com/errata/RHSA-2016-1547.html
• http://www.debian.org/security/2017/dsa-3762
• http://www.openwall.com/lists/oss-security/2016/04/08/6Mailing List, Third Party Advisory
• http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
• http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.htmlPatch, Third Party Advisory
• http://www.securityfocus.com/bid/85960Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1325093Issue Tracking
• https://security.gentoo.org/glsa/201701-16

Published

Sep 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3938drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm vi…
• CVE-2016-3939drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video dr…
• CVE-2016-3940The Synaptics touchscreen driver in Android before 2016-10-0…
• CVE-2016-3941Buffer overflow in the AStreamPeekStream function in input/s…
• CVE-2016-3943Panda Endpoint Administration Agent before 7.50.00, as used …7.8
• CVE-2016-3944UpdateAgent in Lenovo Accelerator Application allows man-in-…
• CVE-2016-3946SAP Console (aka SAPConsole) 7.30 allows local users to disc…
• CVE-2016-3947Heap-based buffer overflow in the Icmp6::Recv function in ic…
• CVE-2016-3948Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perf…
• CVE-2016-3949Siemens SIMATIC S7-300 Profinet-enabled CPU devices with fir…
• CVE-2016-3950Huawei AR3200 routers with software before V200R006C10SPC300…
• CVE-2016-3951Double free vulnerability in drivers/net/usb/cdc_ncm.c in th…