CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2016-9533
Critical (9.8) in libtiff libtiff. EPSS 3.6% chance of exploitation in the next 30 days.
tif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers. Reported as MSVR 35094, aka "PixarLog horizontalDifference heap-buffer-overflow."
Severity
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- libtiff:libtiff