CVE-2025-61144: Libtiff

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

Affected products

• Libtiff Libtiff: before 4.7.1 (fixed in 4.7.1)

Published 2026-02-23. Last modified 2026-06-17.