CVE-2025-61143: Libtiff

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

Affected products

• Libtiff Libtiff: before 4.7.1 (fixed in 4.7.1)

Published 2026-02-23. Last modified 2026-06-17.