Security Advisory

CVE-2016-9535

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-11-22 19:00:00

Last updated 2026-05-29 20:24:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."

← Browse all CVEs View on cve.org ↗