CVE-2016-5317

—

CVSS 3.0

6.5 medium

EPSS

2%p79

Published

Jan 20, 2017 (Jan 20, 2017)

Modified

Jun 17, 2026

Description

Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.

Vendors: libtiff opensuse opensuse project
Products: libtiff, opensuse, leap
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.