CVE-2017-9935: In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c.

Security readout for executives and security teams

CVE-2017-9935 is a LibTIFF 4.0.8 flaw in the tiff2pdf conversion tool. A malicious TIFF file could corrupt memory when converted to PDF, potentially causing crashes and possibly arbitrary code execution. Business urgency is highest where untrusted TIFF files are automatically processed. Exposure is most likely in systems that use LibTIFF tiff2pdf or distro tiff packages to process TIFF files, especially automated document conversion, upload pipelines, scanner workflows, or user-supplied image handling. Prioritize remediation for internet-facing or automated document-processing environments. Lower priority may be reasonable for systems that never process untrusted TIFF files, but patch during normal security maintenance. Mitigation focus: Apply relevant LibTIFF or distro security updates from vendor advisories.; Inventory systems using tiff2pdf or LibTIFF-based TIFF conversion.; Reduce or disable automated processing of untrusted TIFF files where possible..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.