CVE-2025-8177
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-26

Last updated on: 2025-09-11

Assigner: VulDB

Description
A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-26
Last Modified
2025-09-11
Generated
2026-05-07
AI Q&A
2025-07-26
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
libtiff libtiff to 4.7.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

CVE-2025-8177 is a critical buffer overflow vulnerability in the LibTIFF library (up to version 4.7.0), specifically in the function setrow within the file tools/thumbnail.c. The vulnerability occurs because the setrow function processes specially crafted, malformed TIFF files without properly checking buffer boundaries, leading to out-of-bounds memory reads and a global buffer overflow. This can cause crashes or memory corruption. Exploitation requires local access, and the issue affects unsupported versions of LibTIFF. A patch has been released to fix this problem. [3, 4, 5]


How can this vulnerability impact me? :

This vulnerability can impact you by causing your system or application that uses the affected LibTIFF versions to crash or behave unpredictably due to memory corruption from the buffer overflow. It can compromise the confidentiality, integrity, and availability of the affected system. Since exploitation requires local access, an attacker with local privileges could leverage this flaw to potentially escalate privileges or disrupt service. However, remote exploitation is not possible. [3, 4, 5]


How can this vulnerability be detected on my network or system? Can you suggest some commands?

This vulnerability can be detected by running the libtiff thumbnail tool with a specially crafted malformed TIFF file that triggers the buffer overflow in the setrow() function. Detection involves observing crashes or AddressSanitizer (ASan) errors indicating out-of-bounds reads during thumbnail generation. To reproduce or detect the issue, you can build libtiff with ASan enabled and run the thumbnail tool on suspicious TIFF files. Example commands include building libtiff with ASan instrumentation and running the thumbnail tool with a crafted TIFF file: 1) Build libtiff with ASan: `CC=clang CXX=clang++ cmake -DBUILD_SHARED_LIBS=OFF -DCMAKE_C_FLAGS='-fsanitize=address' -DCMAKE_CXX_FLAGS='-fsanitize=address' . && make` 2) Run the thumbnail tool with a crafted TIFF file: `./tools/thumbnail malformed.tiff` Monitoring for ASan errors or crashes indicates the vulnerability is triggered. [4, 5]


What immediate steps should I take to mitigate this vulnerability?

The immediate step to mitigate this vulnerability is to apply the official patch identified by commit e8c9d6c616b19438695fd829e58ae4fde5bfbc22, which fixes the buffer overflow issue in the setrow() function of the thumbnail tool. Since the affected LibTIFF versions up to 4.7.0 are no longer supported, upgrading to a patched version or applying the patch manually is recommended. Additionally, restrict local access to systems running vulnerable versions to prevent exploitation, as the attack requires local access. [1, 2, 3]


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart