CVE-2016-9273

tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode.

• CWE-125

• http://bugzilla.maptools.org/show_bug.cgi?id=2587Issue Tracking
• http://www.debian.org/security/2017/dsa-3762
• http://www.openwall.com/lists/oss-security/2016/11/09/20Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/11/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94271Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201701-16
• http://bugzilla.maptools.org/show_bug.cgi?id=2587Issue Tracking
• http://www.debian.org/security/2017/dsa-3762
• http://www.openwall.com/lists/oss-security/2016/11/09/20Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/11/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94271Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201701-16

Published

Jan 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9265The printMP3Headers function in listmp3.c in Libming 0.4.7 a…
• CVE-2016-9266listmp3.c in libming 0.4.7 allows remote attackers to unspec…
• CVE-2016-9268Unrestricted file upload vulnerability in the Blog appearanc…
• CVE-2016-9269Remote Command Execution in com.trend.iwss.gui.servlet.Manag…
• CVE-2016-9271Cloudera Manager 5.7.x before 5.7.6, 5.8.x before 5.8.4, and…5.4
• CVE-2016-9272A Blind SQL Injection Vulnerability in Exponent CMS through …
• CVE-2016-9274Untrusted search path vulnerability in Git 1.x for Windows a…7.8
• CVE-2016-9275Heap-based buffer overflow in the _dwarf_skim_forms function…7.5
• CVE-2016-9276The dwarf_get_aranges_list function in dwarf_arrange.c in Li…7.5
• CVE-2016-9277Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Sa…
• CVE-2016-9278The Samsung Exynos fimg2d driver for Android with Exynos 543…
• CVE-2016-9279Use-after-free vulnerability in the Samsung Exynos fimg2d dr…