CVE-2016-8331

An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerability resulting in remote code execution. This vulnerability can be triggered via a TIFF file delivered to the application using LibTIFF's tag extension functionality.

• http://www.securityfocus.com/bid/93898Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0190/Exploit, Technical Description, Third Party Advisory
• https://security.gentoo.org/glsa/201701-16
• http://www.securityfocus.com/bid/93898Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0190/Exploit, Technical Description, Third Party Advisory
• https://security.gentoo.org/glsa/201701-16

Published

Oct 28, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8324Vulnerability in the Oracle FLEXCUBE Core Banking component …
• CVE-2016-8325Vulnerability in the Oracle One-to-One Fulfillment component…
• CVE-2016-8327Vulnerability in the MySQL Server component of Oracle MySQL …
• CVE-2016-8328Vulnerability in the Java SE component of Oracle Java SE (su…
• CVE-2016-8329Vulnerability in the PeopleSoft Enterprise PeopleTools compo…
• CVE-2016-8330Vulnerability in the Solaris component of Oracle Sun Systems…
• CVE-2016-8332A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code ex…7.5
• CVE-2016-8333An exploitable stack-based buffer overflow vulnerability exi…8.8
• CVE-2016-8334A large out-of-bounds read on the heap vulnerability in Foxi…6.8
• CVE-2016-8335An exploitable stack based buffer overflow vulnerability exi…8.8
• CVE-2016-8338Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8339A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbit…9.8