CVE-2019-6128

PoC —

CVSS 3.1

8.8 high

EPSS

4%p90

Published

Jan 11, 2019 (Jan 11, 2019)

Modified

Jun 17, 2026

Description

The TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by pal2rgb.

Vendors: libtiff canonical opensuse debian
Products: libtiff, ubuntu linux, leap, debian linux
Weakness: CWE-401
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news0 stories

No ingested article mentions this CVE yet.