Vulnerability-Lookup

OESA-2025-1978 (CVE-2024-13978)

Vulnerability from osv_openeuler – Published: 2025-08-08 11:09 – Updated: 2026-08-06 11:09 – Source website

Summary

libtiff security update

Details

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.(CVE-2024-13978)

Severity

2.5 (Low)


                    
                      CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2024-13978	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.3.0-40.oe2203sp4.aarch64.rpm",
          "libtiff-debuginfo-4.3.0-40.oe2203sp4.aarch64.rpm",
          "libtiff-debugsource-4.3.0-40.oe2203sp4.aarch64.rpm",
          "libtiff-devel-4.3.0-40.oe2203sp4.aarch64.rpm",
          "libtiff-static-4.3.0-40.oe2203sp4.aarch64.rpm",
          "libtiff-tools-4.3.0-40.oe2203sp4.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.3.0-40.oe2203sp4.noarch.rpm"
        ],
        "src": [
          "libtiff-4.3.0-40.oe2203sp4.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.3.0-40.oe2203sp4.x86_64.rpm",
          "libtiff-debuginfo-4.3.0-40.oe2203sp4.x86_64.rpm",
          "libtiff-debugsource-4.3.0-40.oe2203sp4.x86_64.rpm",
          "libtiff-devel-4.3.0-40.oe2203sp4.x86_64.rpm",
          "libtiff-static-4.3.0-40.oe2203sp4.x86_64.rpm",
          "libtiff-tools-4.3.0-40.oe2203sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP4",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-22.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.0-40.oe2203sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-devel-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-static-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-tools-4.6.0-4.oe2403.aarch64.rpm",
          "libtiff-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp2.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.6.0-4.oe2403.noarch.rpm",
          "libtiff-help-4.6.0-4.oe2403sp1.noarch.rpm",
          "libtiff-help-4.6.0-4.oe2403sp2.noarch.rpm"
        ],
        "src": [
          "libtiff-4.6.0-4.oe2403.src.rpm",
          "libtiff-4.6.0-4.oe2403sp1.src.rpm",
          "libtiff-4.6.0-4.oe2403sp2.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-devel-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-static-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-tools-4.6.0-4.oe2403.x86_64.rpm",
          "libtiff-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-24.03-LTS"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.6.0-4.oe2403sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp1.aarch64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp1.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.6.0-4.oe2403sp1.noarch.rpm"
        ],
        "src": [
          "libtiff-4.6.0-4.oe2403sp1.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp1.x86_64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp1.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP1",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-24.03-LTS-SP1"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.6.0-4.oe2403sp1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp2.aarch64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp2.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.6.0-4.oe2403sp2.noarch.rpm"
        ],
        "src": [
          "libtiff-4.6.0-4.oe2403sp2.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-debuginfo-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-debugsource-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-devel-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-static-4.6.0-4.oe2403sp2.x86_64.rpm",
          "libtiff-tools-4.6.0-4.oe2403sp2.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:24.03-LTS-SP2",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-24.03-LTS-SP2"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.6.0-4.oe2403sp2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.3.0-26.oe2003sp4.aarch64.rpm",
          "libtiff-debuginfo-4.3.0-26.oe2003sp4.aarch64.rpm",
          "libtiff-debugsource-4.3.0-26.oe2003sp4.aarch64.rpm",
          "libtiff-devel-4.3.0-26.oe2003sp4.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.3.0-26.oe2003sp4.noarch.rpm"
        ],
        "src": [
          "libtiff-4.3.0-26.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.3.0-26.oe2003sp4.x86_64.rpm",
          "libtiff-debuginfo-4.3.0-26.oe2003sp4.x86_64.rpm",
          "libtiff-debugsource-4.3.0-26.oe2003sp4.x86_64.rpm",
          "libtiff-devel-4.3.0-26.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.0-26.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "aarch64": [
          "libtiff-4.3.0-40.oe2203sp3.aarch64.rpm",
          "libtiff-debuginfo-4.3.0-40.oe2203sp3.aarch64.rpm",
          "libtiff-debugsource-4.3.0-40.oe2203sp3.aarch64.rpm",
          "libtiff-devel-4.3.0-40.oe2203sp3.aarch64.rpm",
          "libtiff-static-4.3.0-40.oe2203sp3.aarch64.rpm",
          "libtiff-tools-4.3.0-40.oe2203sp3.aarch64.rpm"
        ],
        "noarch": [
          "libtiff-help-4.3.0-40.oe2203sp3.noarch.rpm"
        ],
        "src": [
          "libtiff-4.3.0-40.oe2203sp3.src.rpm"
        ],
        "x86_64": [
          "libtiff-4.3.0-40.oe2203sp3.x86_64.rpm",
          "libtiff-debuginfo-4.3.0-40.oe2203sp3.x86_64.rpm",
          "libtiff-debugsource-4.3.0-40.oe2203sp3.x86_64.rpm",
          "libtiff-devel-4.3.0-40.oe2203sp3.x86_64.rpm",
          "libtiff-static-4.3.0-40.oe2203sp3.x86_64.rpm",
          "libtiff-tools-4.3.0-40.oe2203sp3.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:22.03-LTS-SP3",
        "name": "libtiff",
        "purl": "pkg:rpm/openEuler/libtiff\u0026distro=openEuler-22.03-LTS-SP3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.0-40.oe2203sp3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "Low"
  },
  "details": "This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.(CVE-2024-13978)",
  "id": "OESA-2025-1978",
  "modified": "2026-08-06T11:09:03Z",
  "published": "2025-08-08T11:09:03Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1978"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13978"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "libtiff security update",
  "upstream": [
    "CVE-2024-13978"
  ]
}

CVE-2024-13978 (GCVE-0-2024-13978)

Vulnerability from cvelistv5 – Published: 2025-08-01 21:32 – Updated: 2025-11-03 18:08

Title

LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference

Summary

Severity

2 (Low)


                        
                          CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X

2.5 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C

2.5 (Low)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-08-04 14:24 UTC

CWE

CWE-476 - NULL Pointer Dereference
CWE-404 - Denial of Service

Assigner

VulDB mitre root

References

8 references

URL	Tags
https://vuldb.com/?id.318355	vdb-entrytechnical-description
https://vuldb.com/?ctiid.318355	signaturepermissions-required
https://vuldb.com/?submit.624562	third-party-advisory
https://gitlab.com/libtiff/libtiff/-/issues/649	issue-tracking
https://gitlab.com/libtiff/libtiff/-/merge_requests/667	patch
https://gitlab.com/libtiff/libtiff/-/commit/2ebff…	patch
http://www.libtiff.org/	product
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

1 product

Vendor	Product	Version
n/a	LibTIFF	Affected: 4.0 Affected: 4.1 Affected: 4.2 Affected: 4.3 Affected: 4.4 Affected: 4.5 Affected: 4.6 Affected: 4.7.0

Credits

arthurx (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-13978",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-04T14:24:36.801005Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-04T14:24:50.545Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://gitlab.com/libtiff/libtiff/-/issues/649"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T18:08:11.737Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00031.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "modules": [
            "fax2ps"
          ],
          "product": "LibTIFF",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "4.0"
            },
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "status": "affected",
              "version": "4.3"
            },
            {
              "status": "affected",
              "version": "4.4"
            },
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "status": "affected",
              "version": "4.6"
            },
            {
              "status": "affected",
              "version": "4.7.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "arthurx (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue."
        },
        {
          "lang": "de",
          "value": "In LibTIFF bis 4.7.0 wurde eine problematische Schwachstelle ausgemacht. Es geht um die Funktion t2p_read_tiff_init der Datei tools/tiff2pdf.c der Komponente fax2ps. Durch Manipulation mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie gilt als schwierig ausnutzbar. Der Patch wird als 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4 bezeichnet. Als bestm\u00f6gliche Massnahme wird Patching empfohlen."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 2,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 2.5,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1,
            "vectorString": "AV:L/AC:H/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "Denial of Service",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-01T21:32:07.643Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-318355 | LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/?id.318355"
        },
        {
          "name": "VDB-318355 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/?ctiid.318355"
        },
        {
          "name": "Submit #624562 | LibTIFF v4.7.0 NULL Pointer Dereference",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/?submit.624562"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://gitlab.com/libtiff/libtiff/-/issues/649"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.com/libtiff/libtiff/-/merge_requests/667"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4"
        },
        {
          "tags": [
            "product"
          ],
          "url": "http://www.libtiff.org/"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-07-30T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2025-07-30T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2025-07-30T19:52:01.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "LibTIFF fax2ps tiff2pdf.c t2p_read_tiff_init null pointer dereference"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2024-13978",
    "datePublished": "2025-08-01T21:32:07.643Z",
    "dateReserved": "2025-07-30T17:46:25.713Z",
    "dateUpdated": "2025-11-03T18:08:11.737Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OESA-2025-1978 (CVE-2024-13978)

CVE-2024-13978 (GCVE-0-2024-13978)

Tags

Sightings

Nomenclature

Related by attack behaviour