{"action":"Upgrade tiff to 4.0.7-1 or later.","affected":[{"fixed":"4.0.7-1","introduced":"0"}],"component":"tiff","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.0.7-1"],"id":"tcs_01M5NBJVC4M5P4JRS46TBT2HCG","modified_at":"2026-09-22T07:00:46.623286497Z","published_at":"2016-09-21T18:59:01.677Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-3945","https://security-tracker.debian.org/tracker/CVE-2016-3945"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-3945#Debian:13/tiff","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-3945"}],"summary":"Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote attackers to cause a denial o"}