CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2016-9540
Critical (9.8) in libtiff libtiff. EPSS 3.7% chance of exploitation in the next 30 days.
tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka "cpStripToTile heap-buffer-overflow."
Severity
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-119, CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- libtiff:libtiff