CVE-2017-16232: Libtiff

High severity, CVSS 7.5. EPSS: 5.6% chance of exploitation in the next 30 days.

LibTIFF 4.0.8 has multiple memory leak vulnerabilities, which allow attackers to cause a denial of service (memory consumption), as demonstrated by tif_open.c, tif_lzw.c, and tif_aux.c. NOTE: Third parties were unable to reproduce the issue

Affected products

• Libtiff Libtiff: version 4.0.8 only
• Opensuse Leap: version 42.2 only; version 42.3 only
• Suse Linux Enterprise Desktop: version 12 only
• Suse Linux Enterprise Server: version 12 only
• Suse Linux Enterprise Software Development Kit: version 12 only

Published 2019-03-21. Last modified 2026-06-17.