CVE-2016-10092
Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.37%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5 and 4.0.6 allows remote attackers to have unspecified impact via a crafted image.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.37% probability · 84th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- libtiff/libtiff
- Source
- cve@mitre.org
EPSS moved from 4.2% on 21 September 2026 to 2.4% on 26 October 2026.
References
- http://bugzilla.maptools.org/show_bug.cgi?id=2620Exploit, Issue Tracking
- http://bugzilla.maptools.org/show_bug.cgi?id=2622Exploit, Issue Tracking
- http://www.debian.org/security/2017/dsa-3762
- http://www.openwall.com/lists/oss-security/2017/01/01/10Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/01/12Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/95218
- https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory
- https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10092
- https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6aPatch
- http://bugzilla.maptools.org/show_bug.cgi?id=2620Exploit, Issue Tracking
- http://bugzilla.maptools.org/show_bug.cgi?id=2622Exploit, Issue Tracking
- http://www.debian.org/security/2017/dsa-3762
- http://www.openwall.com/lists/oss-security/2017/01/01/10Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/01/01/12Mailing List, Third Party Advisory
- http://www.securityfocus.com/bid/95218
- https://blogs.gentoo.org/ago/2017/01/01/libtiff-multiple-heap-based-buffer-overflow/Patch, Third Party Advisory
- https://github.com/Hack-Me/Pocs_for_Multi_Versions/tree/main/CVE-2016-10092
- https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6aPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.