CVE-2017-9937: Libtiff

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting in a remote denial of service attack.

Affected products

• Libtiff Libtiff: up to and including 4.0.8

Published 2017-06-26. Last modified 2026-06-17.