CVE-2005-1544: Libtiff

High severity, CVSS 7.5. EPSS: 14.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

Affected products

• Libtiff Libtiff: version 3.4 only; version 3.5.1 only; version 3.5.2 only; version 3.5.3 only; version 3.5.4 only; version 3.5.5 only; …

Published 2005-05-14. Last modified 2026-06-16.