n/a LibTiff

Name: n/a LibTiff
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical4high15medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-2869US	medium5.5	0.32% (25th)	Exploit	no fix	2022-08-17	≤ libtiff 4.4.0rc1
CVE-2014-8128US	medium6.5	3.91% (90th)	—	no fix	2020-02-12	≤ prior to 4.0.4
CVE-2020-35523US	high7.8	1.92% (80th)	—	no fix	2021-03-09	≤ libtiff 4.2.0
CVE-2020-35524US	high7.8	1.85% (79th)	—	no fix	2021-03-09	≤ libtiff 4.2.0
CVE-2020-35522US	medium5.5	1.57% (75th)	—	no fix	2021-03-09	≤ libtiff 4.2.0
CVE-2022-2521US	medium6.5	1.33% (71st)	—	no fix	2022-08-31	≤ libtiff 4.4.0rc1
CVE-2022-2519US	medium6.5	1.33% (71st)	—	no fix	2022-08-31	≤ libtiff 4.4.0rc1
CVE-2022-2520US	medium6.5	1.27% (70th)	—	no fix	2022-08-31	≤ libtiff 4.4.0rc1
CVE-2020-35521US	medium5.5	1.23% (69th)	—	no fix	2021-03-09	≤ libtiff 4.2.0
CVE-2022-1355US	medium6.1	0.56% (47th)	—	no fix	2022-08-31	≤ Not-Known
CVE-2022-1354US	medium5.5	0.56% (47th)	—	no fix	2022-08-31	≤ Not-Known
CVE-2023-30774US	medium5.5	0.51% (43rd)	—	no fix	2023-05-19	≤ 4.0
CVE-2023-2731US	medium5.5	0.43% (37th)	—	no fix	2023-05-17	≤ Fixed in libtiff v4.5.0
CVE-2023-1916US	medium6.1	0.36% (30th)	—	no fix	2023-04-10	≤ libtiff versions 4.x and newer are affected
CVE-2025-8177US	high7.8	0.33% (26th)	—	no fix	2025-07-26	8 versions
CVE-2022-2868US	medium5.5	0.32% (25th)	—	no fix	2022-08-17	≤ libtiff 4.4.0rc1
CVE-2022-2867US	medium5.5	0.32% (25th)	—	no fix	2022-08-17	≤ libtiff 4.4.0rc1
CVE-2023-30775US	medium5.5	0.30% (22nd)	—	no fix	2023-05-19	≤ 4.0
CVE-2025-8176US	high7.8	0.29% (21st)	—	no fix	2025-07-26	8 versions
CVE-2025-9165US	—	0.23% (13th)	—	no fix	2025-08-19	≤ 4.7.0
CVE-2025-8961US	—	0.21% (12th)	—	no fix	2025-08-14	≤ 4.7.0
CVE-2024-13978US	—	0.21% (11th)	—	no fix	2025-08-01	8 versions
CVE-2025-8534US	—	0.21% (10th)	—	no fix	2025-08-05	≤ 4.6.0
CVE-2025-8851US	—	0.19% (8th)	—	no fix	2025-08-11	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer10 CVEs
CWE-787Out-of-bounds Write8 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-404Improper Resource Shutdown or Release3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan