CVE-2016-9539 in macOS

Summary

tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

11/21/2016

Disclosure

11/22/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
98723	Apple macOS tiffutil out-of-bounds	125	Proof-of-Concept	Official fix	CVE-2016-9539
93752	LibTIFF tiffcrop.c readContigTilesIntoBuffer out-of-bounds	125	Proof-of-Concept	Official fix	CVE-2016-9539

Sources

• MITRE
• NVD
• CVE Details