JLSEC-2025-265

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2025/JLSEC-2025-265.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-265.json

JSON Data

https://api.test.osv.dev/v1/vulns/JLSEC-2025-265

Upstream

CVE-2022-0908

Published

2025-11-25T22:18:43.603Z

Modified

2026-07-25T18:24:03.633856225Z

Severity

4.3 (Medium) CVSS_V2 - AV:N/AC:M/Au:N/C:N/I:N/A:P CVSS Calculator
5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...

Details

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

Database specific

{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "database_specific": {
                "status": "Modified"
            },
            "imported": "2026-07-17T20:53:21.364Z",
            "published": "2022-03-11T18:15:27.077Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0908",
            "id": "CVE-2022-0908",
            "modified": "2026-06-17T04:21:28.077Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2022-0908"
        }
    ]
}

References

Affected packages

Julia / Libtiff_jll

Package

Name: Libtiff_jll
Purl: pkg:julia/Libtiff_jll?uuid=89763e89-9b03-5906-acba-b20f662cd828

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2025/JLSEC-2025-265.json"