CVE-2014-9330: Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of...

Security readout for executives and security teams

This vulnerability can crash software that uses libtiff 4.0.3's bmp2tif conversion path when it processes a specially crafted BMP image. The business risk is service disruption in image-processing workflows, not proven data theft or code execution based on the supplied sources. Most relevant exposure is servers, batch jobs, or desktop workflows that convert untrusted BMP files using libtiff bmp2tif or downstream packages referenced by vendor advisories. Exact affected downstream package versions are not fully specified in the supplied data. Treat as a targeted availability risk. Prioritize remediation where external users can submit BMP files or where image conversion supports business-critical workflows. Lower priority for systems that do not process untrusted BMP images. Mitigation focus: Inventory systems and applications that use libtiff bmp2tif or convert BMP files.; Apply libtiff updates from the relevant OS or vendor advisory.; Restrict untrusted BMP uploads or conversion until vendor guidance is applied..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.