CVE-2025-61145: Libtiff

Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days.

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

Affected products

• Libtiff Libtiff: before 4.7.1 (fixed in 4.7.1)

Published 2026-02-23. Last modified 2026-06-17.