CVE-2016-9453: Debian Linux

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a JPEG file with a TIFFTAG_JPEGTABLES of length one.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Libtiff Libtiff: before 4.0.7 (fixed in 4.0.7)
• Opensuse Opensuse: version 13.2 only

Published 2017-01-27. Last modified 2026-06-17.