CVE-2016-5319: Libtiff

Medium severity, CVSS 6.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.

Affected products

• Libtiff Libtiff: up to and including 4.0.6

Published 2017-01-20. Last modified 2026-06-17.