{"action":"Upgrade tiff to 3.8.2-11 or later.","affected":[{"fixed":"3.8.2-11","introduced":"0"}],"component":"tiff","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["3.8.2-11"],"id":"tcs_01M5N91MAZ2DG4BDZJ0FYMAT0M","modified_at":"2026-10-23T17:47:50.542275975Z","published_at":"2008-08-27T20:41:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-2327","https://security-tracker.debian.org/tracker/CVE-2008-2327"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-2327#Debian:14/tiff","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-2327"}],"summary":"Multiple buffer underflows in the (1) LZWDecode, (2) LZWDecodeCompat, and (3) LZWDecodeVector functions in tif_lzw.c in the LZW decoder in LibTIFF 3.8.2 and earlier allow context-dependent attackers t"}