CVE-2012-4447: Heap-based buffer overflow in tif_pixarlog.c in LibTIFF before 4.0.3 allows remote attackers to cause a den...

Security readout for executives and security teams

CVE-2012-4447 is an old LibTIFF memory-corruption flaw. An attacker could send or upload a specially crafted TIFF image using PixarLog compression, causing an application crash and possibly code execution if the vulnerable parser is reached. Exposure is most likely where applications, servers, or desktop tools process untrusted TIFF files using LibTIFF before 4.0.3 or older vendor packages. Risk depends on whether TIFF parsing is reachable through uploads, conversion, preview, or scanning workflows. Prioritize remediation where untrusted images are processed automatically or exposed to users. This is legacy but potentially serious because image parsing can sit inside business workflows and may be reachable without direct system access. Mitigation focus: Update LibTIFF to 4.0.3 or a vendor-fixed package.; Apply relevant Debian, Ubuntu, Red Hat, or openSUSE security updates where applicable.; Restrict untrusted TIFF processing until vulnerable dependencies are remediated..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.