CVE-2025-61143

5.5

MEDIUMCVSS v3

Published

February 23, 2026

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

GitLabTIFF Library and Utilities

< 4.7.1NVD

GitLab

< 4.7.1NVD

GitHub

OBSOLETE and not updated any more libtiff mirror, see website for the new one

< 4.7.1NVD

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

< 4.7.1NVD