CVE-2017-7600

PoC —

CVSS 3.0

7.8 high

EPSS

1%p72

Published

Apr 9, 2017 (Apr 9, 2017)

Modified

Jun 17, 2026

Description

LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.

Vendors: libtiff
Products: libtiff
Weakness: CWE-20
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.