Back to vendor advisories
Ubuntu Security NoticesUSN-8113-2

USN-8113-2: LibTIFF vulnerabilities

Severity not listed 2 CVEs Published Aug 19, 2026 at 7:39 AM UTC

Summary

USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS. Original advisory details: It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61143)

It was discovered that LibTIFF did not properly handle memory when processing malformed TIFF directories. An attacker could possibly use this issue to cause LibTIFF to crash, resulting in a denial of service. (CVE-2025-61144)

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

USN 8113-1 fixed vulnerabilities in tiff.

CVEs in this advisory 2

Updates

  1. Published by Ubuntu

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.