CVE-2016-5318: Libtiff

Medium severity, CVSS 6.5. EPSS: 4.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.

Affected products

• Libtiff Libtiff: up to and including 4.0.6

Published 2017-01-20. Last modified 2026-06-17.