CVE-2019-6128

The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

• CWE-401

• http://bugzilla.maptools.org/show_bug.cgi?id=2836Exploit, Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.htmlThird Party Advisory, VDB Entry
• https://gitlab.com/libtiff/libtiff/commit/0c74a9f49b8d7a36b17b54a7428b3526d20f88a8Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00027.htmlMailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/5Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-25Third Party Advisory
• https://usn.ubuntu.com/3906-1/Third Party Advisory
• https://usn.ubuntu.com/3906-2/Third Party Advisory
• http://bugzilla.maptools.org/show_bug.cgi?id=2836Exploit, Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00041.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.htmlThird Party Advisory, VDB Entry
• https://gitlab.com/libtiff/libtiff/commit/0c74a9f49b8d7a36b17b54a7428b3526d20f88a8Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/11/msg00027.htmlMailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Nov/5Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202003-25Third Party Advisory
• https://usn.ubuntu.com/3906-1/Third Party Advisory
• https://usn.ubuntu.com/3906-2/Third Party Advisory

Published

Jan 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6117The wpape APE GALLERY plugin 1.6.14 for WordPress has stored…
• CVE-2019-6120An issue was discovered in NiceHash Miner before 2.0.3.0. A …7.5
• CVE-2019-6121An issue was discovered in NiceHash Miner before 2.0.3.0. Mi…3.7
• CVE-2019-6122A Username Enumeration via Error Message issue was discovere…3.1
• CVE-2019-6126The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM…
• CVE-2019-6127An issue was discovered in XiaoCms 20141229. It allows admin…
• CVE-2019-6129png_create_info_struct in png.c in libpng 1.6.36 has a memor…6.5
• CVE-2019-6130Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page…
• CVE-2019-6131svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion wit…
• CVE-2019-6132An issue was discovered in Bento4 v1.5.1-627. There is a mem…
• CVE-2019-6133In PolicyKit (aka polkit) 0.115, the "start time" protection…
• CVE-2019-6135An issue has been found in libIEC61850 v1.3.1. Memory_malloc…