Low 2.5Published Aug 19, 2025

CVE-2025-9165LibTIFF tiffcmp tiffcmp.c InitCCITTFax3 memory leak

Updated under an hour ago (Nov 2, 2026, 12:23 AM ET)

Does this affect you?

It affects libtiff. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for libtiff Exploited in the last 30 days

A flaw has been found in LibTIFF 4.7.0. This affects the function _TIFFmallocExt/_TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of the component tiffcmp. Executing manipulation can lead to memory leak. The attack is restricted to local execution. This attack is characterized by high complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. There is ongoing doubt regarding the real existence of this vulnerability. This patch is called ed141286a37f6e5ddafb5069347ff5d587e7a4e0. It is best practice to apply a patch to resolve this issue. A researcher disputes the security impact of this issue, because "this is a memory leak on a command line tool that is about to exit anyway". In the reply the project maintainer declares this issue as "a simple 'bug' when leaving the command line tool and (...) not a security issue at all".

CVSS: 2.5 LOW (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
Weakness (CWE): CWE-401, CWE-404
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulDB
NVD analysis: Modified
Record last updated: Oct 1, 2025
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

libtiff libtiff libtiff:libtiff	4.7.0	NVD

References

References

https://vuldb.com/?id.320543	vdb-entry, technical-description, third-party-advisory
https://vuldb.com/?ctiid.320543	signature, permissions-required, vdb-entry
https://vuldb.com/?submit.630506	third-party-advisory, vdb-entry
https://vuldb.com/?submit.630507	third-party-advisory, vdb-entry
https://gitlab.com/libtiff/libtiff/-/issues/728	issue-tracking, exploit, vendor-advisory
https://gitlab.com/libtiff/libtiff/-/merge_requests/747	patch, issue-tracking, vendor-advisory
https://drive.google.com/file/d/1FWhmkzksH8-qU0ZM6seBzGNB3aPnX3G8/view?usp=sharing	exploit
https://gitlab.com/libtiff/libtiff/-/commit/ed141286a37f6e5ddafb5069347ff5d587e7a4e0	patch
http://www.libtiff.org/	product
https://gitlab.com/libtiff/libtiff/-/issues/728#note_2709263214	exploit, issue-tracking, vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.