CVE-2025-61143: libtiff6 Denial of Service via NULL Pointer Dereference
Summary
CVE-2025-61143: libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c. Affected versions are not published. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
libtiff6 is a widely used library for reading and writing TIFF (Tagged Image File Format) files. It provides essential functionalities for image processing and manipulation, making it a critical component in various applications that handle image data. The library is known for its efficiency and versatility, but like any software, it can be susceptible to vulnerabilities that may compromise its stability and security.
Vulnerability Detail
The vulnerability identified as CVE-2025-61143 is a Denial of Service (DoS) issue stemming from a NULL pointer dereference in the libtiff/tif_open.c component of libtiff. This flaw allows an attacker to exploit the library by causing it to crash, leading to service interruptions. The vulnerability affects versions of libtiff up to 4.7.1, and its exploitation can result in significant disruptions for applications relying on this library for image processing.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If an immediate update is not feasible, consider implementing input validation to ensure that the library does not process malformed TIFF files that could trigger the vulnerability. Additionally, running the application in a controlled environment where access to potentially malicious TIFF files is restricted can help mitigate the risk.
Conclusion
CVE-2025-61143 represents a significant vulnerability in the libtiff6 library, which can lead to Denial of Service attacks through NULL pointer dereferences. It is crucial for users and developers to update to the latest version of the library to mitigate this risk and ensure the stability of their applications.
See every vulnerability recorded for libtiff6 →
FAQ
CVE-2025-61143 is a vulnerability in the libtiff6 library that allows for a Denial of Service due to a NULL pointer dereference.
Exploitation of this vulnerability can lead to application crashes, resulting in service disruptions for users relying on image processing functionalities.
Versions of libtiff up to 4.7.1 are affected by this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected without any signup.
The CVSS score for CVE-2025-61143 is 5.5, indicating a moderate level of risk associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libtiff6.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
