CVE-2025-8851

Medium

Description

A vulnerability was determined in LibTIFF up to 4.5.1. Affected by this issue is the function readSeparateStripsetoBuffer of the file tools/tiffcrop.c of the component tiffcrop. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The patch is identified as 8a7a48d7a645992ca83062b3a1873c951661e2b3. It is recommended to apply a patch to fix this issue.

SeverityMedium

CVSS5.3

Exploit probability—

ProductLibtiff

PublishedAug 11, 2025

First seenAug 11, 2025

Weakness typeCWE-121CWE-121 CWE-119Memory buffer bounds error

How to fix

Patches

gitlab.com/libtiff/libtiff/-/commit/8a7a48d7a645992ca83062b3a1873c951661e2b3

Affected products

Product	Affected versions	Fixed in
libtiff libtiff	v ≤ 4.5.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.