CVE-2016-10272: Libtiff

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.

Affected products

• Libtiff Libtiff: version 4.0.7 only

Published 2017-03-24. Last modified 2026-06-17.