CVE & CISA-KEV CatalogNVD
CVE-2025-8176
MEDIUM5.3
CVSS v3
Description
A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as critical. This vulnerability affects the function get_histogram of the file tools/tiffmedian.c. The manipulation leads to use after free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as fe10872e53efba9cc36c66ac4ab3b41a839d5172. It is recommended to apply a patch to fix this issue.
How to fix
Remediation Available
tiffDebian
Fixed in:4.7.1-1CVE-2025-8176
libtiffRocky
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiffRed Hat / RHEL
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiff-debuginfoRed Hat / RHEL
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
libtiff-debuginfoRocky
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
libtiff-debugsourceRed Hat / RHEL
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiff-debugsourceRocky
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
libtiff-develRocky
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
libtiff-develRed Hat / RHEL
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiff-staticRed Hat / RHEL
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
libtiff-staticRocky
Fixed in:0:4.0.3-35.el7_9.1.ppcRHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.s390RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
libtiff-toolsRocky
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
libtiff-toolsRed Hat / RHEL
Fixed in:0:4.0.3-35.el7_9.1.ppc64RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.3-35.el7_9.1RHSA-2025:21407
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiff-tools-debuginfoRocky
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
libtiff-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.0.9-36.el8_10RHSA-2025:20034
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-13.el9_6.2RHSA-2025:19113
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
Fixed in:0:4.4.0-15.el9_7.2RHSA-2025:20956
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-8.el9_2.4RHSA-2025:21508
Fixed in:0:4.4.0-12.el9_4.4RHSA-2025:21507
mingw-libtiffRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw-libtiffRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiffRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiffRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiff-debuginfoRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiff-debuginfoRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiff-staticRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw32-libtiff-staticRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiffRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiffRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiff-debuginfoRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiff-debuginfoRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiff-staticRocky
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
mingw64-libtiff-staticRed Hat / RHEL
Fixed in:0:4.0.9-3.el8_10RHSA-2025:19906
registry.redhat.io/discovery/discoveryRocky
Fixed in:ui-rhel9@sha256:310df392f638ef6eca1a26db024ae2cb617db5932f886d2acddc92fb7289e740_arm64RHSA-2025:21994
Fixed in:server-rhel9@sha256:b4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3_arm64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:69cb9c84b806ee2f448bdbbcf3174855432f5caec8f31ca2a345655da4a72f57_amd64RHSA-2025:21994
Fixed in:server-rhel9@sha256:97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503_amd64RHSA-2025:21994
registry.redhat.io/discovery/discoveryRed Hat / RHEL
Fixed in:ui-rhel9@sha256:310df392f638ef6eca1a26db024ae2cb617db5932f886d2acddc92fb7289e740_arm64RHSA-2025:21994
Fixed in:server-rhel9@sha256:b4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3_arm64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:69cb9c84b806ee2f448bdbbcf3174855432f5caec8f31ca2a345655da4a72f57_amd64RHSA-2025:21994
Fixed in:server-rhel9@sha256:97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503_amd64RHSA-2025:21994
registry.redhat.io/rhaiis/model-optRed Hat / RHEL
Fixed in:cuda-rhel9@sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b_amd64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64RHSA-2025:23080
registry.redhat.io/rhaiis/model-optRocky
Fixed in:cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b_amd64RHSA-2025:23080
registry.redhat.io/rhaiis/vllmRocky
Fixed in:cuda-rhel9@sha256:dcb9d1cd005c40b6db6f893e56419e383b9dcc0d38315605cb1457e2af5354f7_amd64RHSA-2026:3461
Fixed in:cuda-rhel9@sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f_arm64RHSA-2026:3461
Fixed in:cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64RHSA-2025:23078
Fixed in:rocm-rhel9@sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57_amd64RHSA-2025:23079
Fixed in:rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64RHSA-2026:3462
Fixed in:cuda-rhel9@sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b_amd64RHSA-2025:23078
registry.redhat.io/rhaiis/vllmRed Hat / RHEL
Fixed in:cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64RHSA-2025:23078
Fixed in:rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64RHSA-2026:3462
Fixed in:rocm-rhel9@sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57_amd64RHSA-2025:23079
Fixed in:cuda-rhel9@sha256:dcb9d1cd005c40b6db6f893e56419e383b9dcc0d38315605cb1457e2af5354f7_amd64RHSA-2026:3461
Fixed in:cuda-rhel9@sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b_amd64RHSA-2025:23078
Fixed in:cuda-rhel9@sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f_arm64RHSA-2026:3461
spice-client-winRed Hat / RHEL
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
spice-client-winRocky
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
spice-client-win-x64Rocky
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
spice-client-win-x64Red Hat / RHEL
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
spice-client-win-x86Red Hat / RHEL
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
spice-client-win-x86Rocky
Fixed in:0:8.10-3.el8_4.1RHSA-2026:0077
Fixed in:0:8.10-3.el8_2.1RHSA-2026:0078
Fixed in:0:8.10-3.el8_6.1RHSA-2026:0076
Fixed in:0:8.10-3.el8_8.1RHSA-2026:0001
libtiff-toolsUbuntu
Fixed in:4.0.3-7ubuntu0.11+esm15USN-7707-1
Fixed in:4.0.6-1ubuntu0.8+esm18USN-7707-1
Fixed in:4.0.9-5ubuntu0.10+esm8USN-7707-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.14+esm1USN-7707-1
Fixed in:4.3.0-6ubuntu0.11USN-7707-1
Fixed in:4.5.1+git230720-4ubuntu2.3USN-7707-1
libtiff5Ubuntu
Fixed in:4.0.3-7ubuntu0.11+esm15USN-7707-1
Fixed in:4.0.6-1ubuntu0.8+esm18USN-7707-1
Fixed in:4.0.9-5ubuntu0.10+esm8USN-7707-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.14+esm1USN-7707-1
Fixed in:4.3.0-6ubuntu0.11USN-7707-1
libtiff6Ubuntu
Fixed in:4.5.1+git230720-4ubuntu2.3USN-7707-1
tiffUbuntu
Fixed in:4.0.3-7ubuntu0.11+esm15USN-7707-1
Fixed in:4.0.6-1ubuntu0.8+esm18USN-7707-1
Fixed in:4.0.9-5ubuntu0.10+esm8USN-7707-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.14+esm1USN-7707-1
Fixed in:4.3.0-6ubuntu0.11USN-7707-1
Fixed in:4.5.1+git230720-4ubuntu2.3USN-7707-1
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Exploit Intelligence
0.24%probability of exploitation in 30 days
15thpercentile
Low risk: more likely to be exploited than 15% of all known CVEs.
References
Patch1
Exploit1
VDB Entry1
Product2
Related Vulnerabilities
Other CWE-119 (Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2023-4966 | Critical | 9.4 | 100% | KEV + Ransom | Fix |
| CVE-2017-11882 | High | 7.8 | 100% | KEV + Ransom | - |
| CVE-2020-0796 | Critical | 10.0 | 100% | KEV + Ransom | - |
| CVE-2008-4250 | Critical | 9.8 | 99% | KEV | - |
| CVE-2017-15944 | Critical | 9.8 | 98% | KEV | Fix |
| CVE-2015-0014 | High | 10.0 | 97% | - | - |
Embed a live status badge for CVE-2025-8176
Markdown
[](https://tridentstack.com/cve/CVE-2025-8176)HTML
<a href="https://tridentstack.com/cve/CVE-2025-8176"><img src="https://tridentstack.com/cve/badge/CVE-2025-8176.svg" alt="CVE-2025-8176"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-04-29.