CVE-2010-2067: Stack-based buffer overflow in the TIFFFetchSubjectDistance function in tif_dirread.c in LibTIFF before 3.9...

Security readout for executives and security teams

This flaw is in LibTIFF image parsing. A specially crafted TIFF file with an oversized EXIF SubjectDistance field could crash software using vulnerable LibTIFF, and the CVE says arbitrary code execution may be possible. Business risk is highest where untrusted image files are uploaded, emailed, previewed, converted, or indexed. Exposure is likely in systems running LibTIFF before 3.9.4, including applications with bundled copies, that process TIFF or EXIF data from untrusted sources. The provided affected-product metadata is incomplete, so inventory and package-level verification matter. Prioritize remediation where TIFF files enter business systems from customers, partners, email, or public uploads. Lower priority may be reasonable for isolated systems that do not process TIFF files, but confirm that assumption. Mitigation focus: Upgrade LibTIFF to 3.9.4 or later where applicable.; Apply relevant Linux distribution security updates or backports.; Identify applications bundling their own LibTIFF copy..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.