LibTiff LibTiff

Name: LibTiff LibTiff
Brand: LibTiff

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high14medium0low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-0891US	high7.1	1.54% (75th)	Exploit	no fix	2022-03-10	≤ 3.9.0, ≤4.3.0
CVE-2016-5652US	high7.0	4.14% (91st)	—	no fix	2017-01-06	≤ 4.0.6
CVE-2017-9117US	critical9.8	2.16% (82nd)	—	no fix	2017-05-21	≤ 4.0.6
CVE-2022-1622US	medium5.5	1.73% (78th)	—	no fix	2022-05-11	≤ 3079627ea0dee150e6a208cec8381de611bb842b
CVE-2022-0865US	medium6.5	1.48% (74th)	—	no fix	2022-03-10	≤ =4.3.0
CVE-2022-0924US	medium5.5	1.33% (71st)	—	no fix	2022-03-11	≤ =4.3.0
CVE-2022-0909US	medium5.5	1.33% (71st)	—	no fix	2022-03-11	≤ =4.3.0
CVE-2022-2058US	medium6.5	1.32% (71st)	—	no fix	2022-06-30	≤ =4.4.0
CVE-2022-2057US	medium6.5	1.27% (70th)	—	no fix	2022-06-30	≤ =4.4.0
CVE-2022-2056US	medium6.5	1.27% (70th)	—	no fix	2022-06-30	≤ =4.4.0
CVE-2022-0907US	medium5.5	1.27% (70th)	—	no fix	2022-03-11	≤ =4.3.0
CVE-2022-1623US	medium5.5	1.25% (69th)	—	no fix	2022-05-11	≤ 3079627ea0dee150e6a208cec8381de611bb842b
CVE-2022-0562US	medium5.5	1.25% (69th)	—	no fix	2022-02-11	≤ 4.0, ≤4.3.0
CVE-2022-0561US	medium5.5	1.25% (69th)	—	no fix	2022-02-11	≤ 3.9.0, ≤4.3.0
CVE-2023-3316US	medium6.5	1.12% (66th)	—	4.5.1	2023-06-19	3.9.0 → 4.5.1
CVE-2022-1056US	medium5.5	1.09% (65th)	—	no fix	2022-03-28	≤ =4.3.0
CVE-2022-2953US	medium5.5	0.57% (47th)	—	no fix	2022-08-29	≤ ≤4.4.0

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read6 CVEs
CWE-369Divide By Zero4 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-252Unchecked Return Value1 CVEs
CWE-617Reachable Assertion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.