CVE-2017-9937: In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c.

Security readout for executives and security teams

A malicious TIFF image can crash software that uses LibTIFF 4.0.8 to process it. The reported impact is denial of service, not data theft or code execution. Business risk depends on whether public-facing or automated workflows accept TIFF files from untrusted sources. Exposure is most likely in applications, services, document pipelines, scanners, or image converters that process untrusted TIFF files using LibTIFF 4.0.8, especially where JBIG-compressed TIFF handling is enabled. Treat as a targeted reliability risk for file-processing services. Prioritize internet-facing upload paths and automated document workflows, but do not rank it like a code-execution vulnerability based on the provided evidence. Mitigation focus: Inventory systems and dependencies that include LibTIFF 4.0.8.; Check LibTIFF or downstream vendor guidance for fixed versions.; Prioritize systems that process TIFF files from external users..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.