CVE-2016-3622: Libtiff

Medium severity, CVSS 6.5. EPSS: 3.9% chance of exploitation in the next 30 days.

The fpAcc function in tif_predict.c in the tiff2rgba tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted TIFF image.

Affected products

• Libtiff Libtiff: version 4.0.6 only

Published 2016-10-03. Last modified 2026-06-17.