CVE-2025-8961

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A weakness has been identified in LibTIFF 4.7.0. This affects the function main of the file tiffcrop.c of the component tiffcrop. Executing manipulation can lead to memory corruption. The attack can only be executed locally. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	LibTIFF	4.7.0

References

http://www.libtiff.org/Product
https://drive.google.com/file/d/15L4q2eD8GX3Aj3z6SWC3_FbqaM1ChUx2/view?usp=sharingExploit
https://gitlab.com/libtiff/libtiff/-/issues/721Exploit, Issue Tracking, Vendor Advisory
https://gitlab.com/libtiff/libtiff/-/issues/721#note_2670686960Exploit, Issue Tracking, Vendor Advisory
https://vuldb.com/?ctiid.319955Permissions Required, VDB Entry
https://vuldb.com/?id.319955Third Party Advisory, VDB Entry
https://vuldb.com/?submit.627957Third Party Advisory, VDB Entry

Timeline

Published: Aug 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-89627.8A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the f CVE-2025-89639.8A vulnerability was determined in jeecgboot JimuReport up to 2.1.1. Affected by this issue is some unknown functionality of the file /drag/o CVE-2025-89647.8A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of CVE-2025-89658.8A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin CVE-2025-89669.8A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the fi CVE-2025-89679.8A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /ad CVE-2025-89689.8A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown fu CVE-2025-89699.8A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown function CVE-2025-89709.8A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/oper CVE-2025-89719.8A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the CVE-2025-89729.8A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of t CVE-2025-89739.8A vulnerability has been found in SourceCodester Cashier Queuing System 1.0. Affected is an unknown function of the file /Actions.php. The m