UBUNTU-CVE-2025-9165

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-9165

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9165.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2025-9165

Upstream

CVE-2025-9165

Published

2025-08-19T20:15:00Z

Modified

2025-08-27T18:37:34Z

Severity

3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Ubuntu - low

Summary

[none]

Details

A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply a patch to resolve this issue.

References

Affected packages

Ubuntu:Pro:14.04:LTS / gdal

Package

Name: gdal
Purl: pkg:deb/ubuntu/gdal@1.10.1+dfsg-5ubuntu1+esm1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.9.0-3.1ubuntu4

1.9.0-3.1ubuntu6

1.10.1+dfsg-2

1.10.1+dfsg-2build1

1.10.1+dfsg-3

1.10.1+dfsg-3build1

1.10.1+dfsg-3build2

1.10.1+dfsg-3ubuntu1

1.10.1+dfsg-3ubuntu2

1.10.1+dfsg-5ubuntu1

1.10.1+dfsg-5ubuntu1+esm1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:14.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.0.3-7ubuntu0.11+esm15?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.2-4ubuntu3

4.0.3-5ubuntu1

4.0.3-6

4.0.3-6ubuntu1

4.0.3-7

4.0.3-7ubuntu0.1

4.0.3-7ubuntu0.2

4.0.3-7ubuntu0.3

4.0.3-7ubuntu0.4

4.0.3-7ubuntu0.6

4.0.3-7ubuntu0.7

4.0.3-7ubuntu0.8

4.0.3-7ubuntu0.9

4.0.3-7ubuntu0.10

4.0.3-7ubuntu0.11

4.0.3-7ubuntu0.11+esm1

4.0.3-7ubuntu0.11+esm2

4.0.3-7ubuntu0.11+esm3

4.0.3-7ubuntu0.11+esm4

4.0.3-7ubuntu0.11+esm5

4.0.3-7ubuntu0.11+esm6

4.0.3-7ubuntu0.11+esm7

4.0.3-7ubuntu0.11+esm8

4.0.3-7ubuntu0.11+esm9

4.0.3-7ubuntu0.11+esm10

4.0.3-7ubuntu0.11+esm11

4.0.3-7ubuntu0.11+esm12

4.0.3-7ubuntu0.11+esm13

4.0.3-7ubuntu0.11+esm14

4.0.3-7ubuntu0.11+esm15

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:16.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.0.6-1ubuntu0.8+esm18?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.3-12.3ubuntu2

4.0.5-1

4.0.6-1

4.0.6-1ubuntu0.1

4.0.6-1ubuntu0.2

4.0.6-1ubuntu0.3

4.0.6-1ubuntu0.4

4.0.6-1ubuntu0.5

4.0.6-1ubuntu0.6

4.0.6-1ubuntu0.7

4.0.6-1ubuntu0.8

4.0.6-1ubuntu0.8+esm1

4.0.6-1ubuntu0.8+esm2

4.0.6-1ubuntu0.8+esm3

4.0.6-1ubuntu0.8+esm4

4.0.6-1ubuntu0.8+esm6

4.0.6-1ubuntu0.8+esm7

4.0.6-1ubuntu0.8+esm8

4.0.6-1ubuntu0.8+esm9

4.0.6-1ubuntu0.8+esm10

4.0.6-1ubuntu0.8+esm11

4.0.6-1ubuntu0.8+esm12

4.0.6-1ubuntu0.8+esm13

4.0.6-1ubuntu0.8+esm14

4.0.6-1ubuntu0.8+esm15

4.0.6-1ubuntu0.8+esm16

4.0.6-1ubuntu0.8+esm17

4.0.6-1ubuntu0.8+esm18

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:16.04:LTS / gdal

Package

Name: gdal
Purl: pkg:deb/ubuntu/gdal@1.11.3+dfsg-3build2?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.11.2+dfsg-3ubuntu3

1.11.2+dfsg-3ubuntu4

1.11.3+dfsg-2build1

1.11.3+dfsg-2build2

1.11.3+dfsg-2build3

1.11.3+dfsg-3

1.11.3+dfsg-3build1

1.11.3+dfsg-3build2

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:16.04:LTS / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@4.4.1-1.1?arch=source&distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.1-1

4.4.1-1.1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:18.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.0.9-5ubuntu0.10+esm8?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.8-5

4.0.8-6

4.0.9-1

4.0.9-2

4.0.9-3

4.0.9-4

4.0.9-4ubuntu1

4.0.9-5

4.0.9-5ubuntu0.1

4.0.9-5ubuntu0.2

4.0.9-5ubuntu0.3

4.0.9-5ubuntu0.4

4.0.9-5ubuntu0.5

4.0.9-5ubuntu0.6

4.0.9-5ubuntu0.7

4.0.9-5ubuntu0.8

4.0.9-5ubuntu0.9

4.0.9-5ubuntu0.10

4.0.9-5ubuntu0.10+esm1

4.0.9-5ubuntu0.10+esm2

4.0.9-5ubuntu0.10+esm3

4.0.9-5ubuntu0.10+esm4

4.0.9-5ubuntu0.10+esm5

4.0.9-5ubuntu0.10+esm6

4.0.9-5ubuntu0.10+esm7

4.0.9-5ubuntu0.10+esm8

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:18.04:LTS / neuron

Package

Name: neuron
Purl: pkg:deb/ubuntu/neuron@7.5-1?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.5-1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:18.04:LTS / qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.9.5+dfsg-0ubuntu2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.9.1+dfsg-4

5.9.1+dfsg-4ubuntu1

5.9.2+dfsg-2ubuntu1

5.9.3+dfsg-0ubuntu1

5.9.4+dfsg-0ubuntu1

5.9.5+dfsg-0ubuntu2

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:18.04:LTS / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@5.0.2-1build2?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.5-1

5.*

5.0.2-1

5.0.2-1build1

5.0.2-1build2

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:20.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.1.0+git191117-2ubuntu0.20.04.14+esm1?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.0.10+git191003-1

4.1.0+git191117-1

4.1.0+git191117-2

4.1.0+git191117-2build1

4.1.0+git191117-2ubuntu0.20.04.1

4.1.0+git191117-2ubuntu0.20.04.2

4.1.0+git191117-2ubuntu0.20.04.3

4.1.0+git191117-2ubuntu0.20.04.4

4.1.0+git191117-2ubuntu0.20.04.5

4.1.0+git191117-2ubuntu0.20.04.6

4.1.0+git191117-2ubuntu0.20.04.7

4.1.0+git191117-2ubuntu0.20.04.8

4.1.0+git191117-2ubuntu0.20.04.9

4.1.0+git191117-2ubuntu0.20.04.10

4.1.0+git191117-2ubuntu0.20.04.11

4.1.0+git191117-2ubuntu0.20.04.12

4.1.0+git191117-2ubuntu0.20.04.13

4.1.0+git191117-2ubuntu0.20.04.14

4.1.0+git191117-2ubuntu0.20.04.14+esm1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:20.04:LTS / neuron

Package

Name: neuron
Purl: pkg:deb/ubuntu/neuron@7.6.3-1build4?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.6.3-1build2

7.6.3-1build3

7.6.3-1build4

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:20.04:LTS / qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.12.8+dfsg-0ubuntu1.1?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.12.4+dfsg-1ubuntu1

5.12.4+dfsg-1ubuntu3

5.12.5+dfsg-3ubuntu1

5.12.5+dfsg-6ubuntu2

5.12.5+dfsg-7

5.12.5+dfsg-7build1

5.12.8+dfsg-0ubuntu1

5.12.8+dfsg-0ubuntu1.1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:Pro:20.04:LTS / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@5.0.3-1build5?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.3-1build2

5.0.3-1build3

5.0.3-1build4

5.0.3-1build5

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:22.04:LTS / neuron

Package

Name: neuron
Purl: pkg:deb/ubuntu/neuron@7.6.3-1build6?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.6.3-1build5

7.6.3-1build6

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:22.04:LTS / qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.9+dfsg-1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.6+dfsg-1

5.15.6+dfsg-2

5.15.7+dfsg-2

5.15.8+dfsg-1

5.15.8+dfsg-1build1

5.15.8+dfsg-1build2

5.15.8+dfsg-2

5.15.9+dfsg-1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:22.04:LTS / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@5.0.3-1build9?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.3-1build8

5.0.3-1build9

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:22.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.3.0-6ubuntu0.11?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.3.0-1

4.3.0-2

4.3.0-3

4.3.0-3build1

4.3.0-4

4.3.0-5

4.3.0-6

4.3.0-6ubuntu0.1

4.3.0-6ubuntu0.2

4.3.0-6ubuntu0.3

4.3.0-6ubuntu0.4

4.3.0-6ubuntu0.5

4.3.0-6ubuntu0.6

4.3.0-6ubuntu0.7

4.3.0-6ubuntu0.8

4.3.0-6ubuntu0.9

4.3.0-6ubuntu0.10

4.3.0-6ubuntu0.11

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:24.04:LTS / qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.16+dfsg-3?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.15+dfsg-2

5.15.15+dfsg-2build2

5.15.15+dfsg-2ubuntu1

5.15.16+dfsg-1

5.15.16+dfsg-1ubuntu2

5.15.16+dfsg-1ubuntu4

5.15.16+dfsg-3

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:24.04:LTS / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@5.1.3+dfsg-1build8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.1.3+dfsg-1build4

5.1.3+dfsg-1build5

5.1.3+dfsg-1build6

5.1.3+dfsg-1build7

5.1.3+dfsg-1build8

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:24.04:LTS / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.5.1+git230720-4ubuntu2.3?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.5.1+git230720-1ubuntu1

4.5.1+git230720-3ubuntu1

4.5.1+git230720-4ubuntu1

4.5.1+git230720-4ubuntu2

4.5.1+git230720-4ubuntu2.1

4.5.1+git230720-4ubuntu2.2

4.5.1+git230720-4ubuntu2.3

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:25.04 / qtwebengine-opensource-src

Package

Name: qtwebengine-opensource-src
Purl: pkg:deb/ubuntu/qtwebengine-opensource-src@5.15.18+dfsg-2?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.17+dfsg-4

5.15.17+dfsg-5

5.15.17+dfsg2-1

5.15.17+dfsg2-2

5.15.17+dfsg2-3

5.15.18+dfsg-1

5.15.18+dfsg-2

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:25.04 / texmaker

Package

Name: texmaker
Purl: pkg:deb/ubuntu/texmaker@5.1.3+dfsg-3?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.1.3+dfsg-2build1

5.1.3+dfsg-3

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}

Ubuntu:25.04 / tiff

Package

Name: tiff
Purl: pkg:deb/ubuntu/tiff@4.5.1+git230720-4ubuntu4.1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.5.1+git230720-4ubuntu4

4.5.1+git230720-4ubuntu4.1

Ecosystem specific

{
    "priority_reason": "Only a memory leak in a command line tool"
}