Vulnerability Report

CVE-2025-61144

Title: Stack overflow in libtiff readSeparateStripsIntoBuffer function

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2025-61144.

CWE Category NVD-CWE-noinfo

Published Date Feb 23, 2026

Modified Date Feb 25, 2026

Exploit Status Not Found

Score 7.3 CVSS v

Exploit Probability (EPSS)

0.03%

Vulnerability Summary

CVE-2025-61144: libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

Impacted Vendors

libtiff 1

simplesystems 1

Reference Links

https://gist.github.com/optionGo/5ad17e96a0a40f03578dd6c9f8645952 https://gitlab.com/libtiff/libtiff/-/commit/09f53a86cf26dfd961925227e59e180db617f26d https://gitlab.com/libtiff/libtiff/-/commit/88cf9dbb48f6e172629795ecffae35d5052f68aa https://gitlab.com/libtiff/libtiff/-/issues/740 https://gitlab.com/libtiff/libtiff/-/merge_requests/757

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.3

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

REQUIRED

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity CRITICAL

9.8

Attack Vector

NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns