CVE-2010-2595

no score yetEPSS 2.8%

libtiff libtiff: no CVSS score yet. EPSS 2.8% chance of exploitation in the next 30 days.

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers an array index error, related to "downsampled OJPEG input."

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2010-07-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

libtiff:libtiff

References

http://blackberry.com/btsc/KB27244
http://bugzilla.maptools.org/show_bug.cgi?id=2208
http://marc.info/?l=oss-security&m=127731610612908&w=2
http://secunia.com/advisories/40422
http://secunia.com/advisories/40527

Check your stack JSON