CVE-2016-9535
EUVD-2016-1034122.11.2016, 19:59
tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libtiff | libtiff | 4.0.6 |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||||
| Windows 11 |
| ||||||||||
| Windows Server 2008 |
| ||||||||||
| Windows Server 2008 R2 |
| ||||||||||
| Windows Server 2012 |
| ||||||||||
| Windows Server 2012 R2 |
| ||||||||||
| Windows Server 2016 |
| ||||||||||
| Windows Server 2019 |
| ||||||||||
| Windows Server 2022 |
| ||||||||||
| Windows Server 2025 |
|
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References