CVE-2016-10266

5.5 mediumEPSS 1.7%

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-369
Published: 2017-03-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

libtiff:libtiff

References

http://www.debian.org/security/2017/dsa-3844
http://www.securityfocus.com/bid/97115
https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-divide-by-zero
https://github.com/vadz/libtiff/commit/438274f938e046d33cb0e1230b41da32ffe223e1
https://usn.ubuntu.com/3602-1/

Check your stack JSON