Search CVE reports

1 – 10 of 39 results

Detailed view

Sort by:

CVE-2025-9900

High priority

Some fixes available 8 of 26

A flaw was found in Libtiff. This vulnerability is a “write-what-where” condition, triggered when the library processes a specially crafted TIFF image file. By providing an abnormally large image height value in the file’s...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
tiff	Fixed	Fixed	Fixed	Fixed
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-9165

Low priority

Some fixes available 8 of 26

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak....

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
tiff	Fixed	Fixed	Fixed	Fixed
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-8961

Low priority

Fixed

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The...

5 affected packages

qtwebengine-opensource-src, texmaker, gdal, neuron, tiff

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
qtwebengine-opensource-src	Not affected	Not affected	Not affected	Not affected
texmaker	Not affected	Not affected	Not affected	Not affected
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Not affected	Not affected	Not affected
tiff	Fixed	Fixed	Fixed	Fixed

CVE-2025-8851

Medium priority

Some fixes available 7 of 25

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
tiff	Fixed	Fixed	Fixed	Fixed
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-50952

Medium priority

Some fixes available 4 of 32

openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.

7 affected packages

insighttoolkit4, qtwebengine-opensource-src, blender, texmaker, ghostscript...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
insighttoolkit4	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
blender	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ghostscript	Not affected	Not affected	Not affected	Needs evaluation
openjpeg	Not in release	Not in release	—	—
openjpeg2	Fixed	Fixed	Fixed	Fixed

CVE-2025-8534

Medium priority

Some fixes available 8 of 26

A vulnerability classified as problematic was found in libtiff 4.6.0. This vulnerability affects the function PS_Lvl2page of the file tools/tiff2ps.c of the component tiff2ps. The manipulation leads to null pointer dereference. It...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
tiff	Fixed	Fixed	Fixed	Fixed
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-54874

Medium priority

Some fixes available 2 of 26

OpenJPEG is an open-source JPEG 2000 codec. In OpenJPEG from 2.5.1 through 2.5.3, a call to opj_jp2_read_header may lead to OOB heap memory write when the data stream p_stream is too short and p_image is not initialized.

7 affected packages

insighttoolkit4, qtwebengine-opensource-src, blender, texmaker, ghostscript...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
insighttoolkit4	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
blender	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ghostscript	Not affected	Not affected	Not affected	Not affected
openjpeg	Not in release	Not in release	—	—
openjpeg2	Not affected	Not affected	Not affected	Not affected

CVE-2024-13978

Medium priority

Some fixes available 1 of 19

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads...

5 affected packages

tiff, qtwebengine-opensource-src, texmaker, gdal, neuron

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
tiff	Not affected	Not affected	Not affected	Not affected
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
gdal	Not affected	Not affected	Not affected	Not affected
neuron	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2024-56827

Medium priority

Some fixes available 10 of 37

A flaw was found in the OpenJPEG project. A heap buffer overflow condition may be triggered when certain options are specified while using the opj_decompress utility. This can lead to an application crash or other undefined behavior.

7 affected packages

insighttoolkit4, qtwebengine-opensource-src, blender, texmaker, ghostscript...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
insighttoolkit4	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
blender	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ghostscript	Not affected	Not affected	Not affected	Fixed
openjpeg	Not in release	Not in release	Not in release	—
openjpeg2	Fixed	Fixed	Fixed	Fixed

CVE-2024-56826

Medium priority

Some fixes available 10 of 37

7 affected packages

openjpeg2, insighttoolkit4, qtwebengine-opensource-src, blender, texmaker...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
openjpeg2	Fixed	Fixed	Fixed	Fixed
insighttoolkit4	Not in release	Needs evaluation	Needs evaluation	Needs evaluation
qtwebengine-opensource-src	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
blender	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
texmaker	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
ghostscript	Not affected	Not affected	Not affected	Fixed
openjpeg	Not in release	Not in release	Not in release	—

Export to JSON

Results by page: