CVE-2011-0192: Buffer overflow in Fax4Decode in LibTIFF 3.9.4 and possibly other versions, as used in ImageIO in Apple iTu...

Security readout for executives and security teams

CVE-2011-0192 is an old image-parsing flaw in LibTIFF. A malicious TIFF Internet Fax image could crash software or potentially run attacker-controlled code when processed by affected components, including Apple ImageIO in iTunes before 10.2 on Windows and other vendor-distributed products. Exposure is most likely where legacy systems still process untrusted TIFF files using affected LibTIFF builds or vendor products that embedded them. The bundle names Apple iTunes before 10.2 on Windows and shows Linux and other vendors issued advisories, but exact affected versions are incomplete. Treat this as high priority on legacy systems that ingest images from outside the organization. It is old, but image parsing vulnerabilities often persist through embedded libraries and bundled desktop software. Modern fully patched platforms are less likely to be exposed. Mitigation focus: Apply relevant vendor security updates for LibTIFF and affected bundled products.; Update Apple iTunes on Windows to 10.2 or later if still present.; Identify applications that parse TIFF files through embedded or system LibTIFF..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.