Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-13978

Date: August 1, 2025

A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.

Severity Score

Related Resources (10)

https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4
https://gitlab.com/libtiff/libtiff/-/issues/649
https://nvd.nist.gov/vuln/detail/CVE-2024-13978
http://www.libtiff.org/
https://vuldb.com/?id.318355
https://security-tracker.debian.org/tracker/CVE-2024-13978
https://vuldb.com/?ctiid.318355
https://vuldb.com/?submit.624562
https://gitlab.com/libtiff/libtiff/-/merge_requests/667
https://www.mend.io/vulnerability-database/CVE-2024-13978

Severity Score

Weakness Type (CWE)

Improper Resource Shutdown or Release

CWE-404

NULL Pointer Dereference

CWE-476

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): LOCAL
Access Complexity (AC): HIGH
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us