CVE-2006-3463: Libtiff

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.

Affected products

• Libtiff Libtiff: up to and including 3.8.1

Published 2006-08-03. Last modified 2026-06-16.