CVE-2017-5225: Libtiff

High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days.

LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution via a crafted BitsPerSample value.

Affected products

• Libtiff Libtiff: version 4.0.7 only

Published 2017-01-12. Last modified 2026-06-17.