CVE-2018-10779 — libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c

Back Back to CVE browser

MEDIUM

libtiff: heap-based buffer over-read in TIFFWriteScanline function in tif_write.c

Published May 7, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 2.93%

Description

TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.

Affected products

Red Hat Enterprise Linux 7

libtiff-0:4.0.3-32.el7

Fixed · RHSA-2019:2053
Red Hat Enterprise Linux 5

libtiff

Will not fix
Red Hat Enterprise Linux 6

libtiff

Will not fix
Red Hat Enterprise Linux 8

libtiff

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	libtiff-0:4.0.3-32.el7	Fixed	RHSA-2019:2053
Red Hat Enterprise Linux 5	libtiff	Will not fix	n/a
Red Hat Enterprise Linux 6	libtiff	Will not fix	n/a
Red Hat Enterprise Linux 8	libtiff	Will not fix	n/a

Remediation

Red Hat statement

This vulnerability is rated as low severity because it causes a denial of service due to a heap-based buffer over-read, it may crash the application, it does not pose a significant risk to system security.

Metrics

2.93% 0.02926

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02926

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (17 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.93% (0.02926)	86.58th	v5 (v2026.06.15)
Jun 15, 2026	3.09% (0.03087)	85.96th	v5 (v2026.06.15)
Mar 17, 2025	0.27% (0.00268)	48.23th	v4 (v2025.03.14)
Dec 12, 2024	0.20% (0.00197)	58.55th	v3 (v2023.03.01)
Sep 28, 2023	0.20% (0.00197)	57.10th	v3 (v2023.03.01)
Jul 8, 2023	0.28% (0.00282)	64.14th	v3 (v2023.03.01)
May 8, 2023	0.40% (0.00397)	69.53th	v3 (v2023.03.01)
May 1, 2023	0.28% (0.00282)	63.80th	v3 (v2023.03.01)
Mar 7, 2023	0.34% (0.00336)	66.68th	v3 (v2023.03.01)
Mar 6, 2023	1.02% (0.01018)	40.69th	v2 (v2022.01.01)
Sep 10, 2022	1.02% (0.01018)	38.88th	v2 (v2022.01.01)
Apr 1, 2022	1.02% (0.01018)	36.86th	v2 (v2022.01.01)
Feb 4, 2022	1.02% (0.01018)	19.50th	v2 (v2022.01.01)
Feb 3, 2022	1.25% (0.01247)	30.57th	v1
Jan 6, 2022	1.25% (0.01247)	29.93th	v1
Sep 1, 2021	1.25% (0.01247)	68.62th	v1
Apr 14, 2021	1.25% (0.01247)	0.00th	v1

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-190

Integer Overflow

References (9)

http://bugzilla.maptools.org/show_bug.cgi?id=2788
x_refsource_MISCExploitIssue TrackingThird Party Advisory
http://www.securityfocus.com/bid/104089
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2019:2053
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-10779
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1577311
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-10779
https://usn.ubuntu.com/3906-1/
vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3906-2/
vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2018-10779

Link	Providers	Tags
http://bugzilla.maptools.org/show_bug.cgi?id=2788		x_refsource_MISCExploitIssue TrackingThird Party Advisory
http://www.securityfocus.com/bid/104089		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/errata/RHSA-2019:2053		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-10779		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1577311		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-10779
https://usn.ubuntu.com/3906-1/		vendor-advisoryx_refsource_UBUNTUThird Party Advisory
https://usn.ubuntu.com/3906-2/		vendor-advisoryx_refsource_UBUNTU
https://www.cve.org/CVERecord?id=CVE-2018-10779