How many CVEs have patched main?

3 published CVEs changed main in debian/tiff, in 3 distinct patches totalling 41 changed lines, between 2023 and 2025.

What is the latest CVE that changed main?

CVE-2025-8961 (LibTIFF tiffcrop tiffcrop.c main memory corruption), published 2025-08-14, changed lines 2910 of tools/tiffcrop.c.

How does main compare to the rest of debian/tiff?

debian/tiff has 35 CVEs with a located fix in total; 3 of them changed main.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

debian/tiff

Function

2 files

main

Name: main in debian/tiff: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 2 files

Last patched August 14, 2025

3

CVEs

That changed this function

3

Distinct patches

Backports counted once

41

Lines changed

Added plus removed

2023–2025

Years

By CVE publication date

Overview

main in debian/tiff was changed by 3 published CVE fixes between 2023 and 2025, in 3 distinct patches that added or removed 41 lines in total.

The name occurs in 2 files: tools/raw2tiff.c, tools/tiffcrop.c.

debian/tiff has 35 CVEs with a located fix in total, so 9% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed main, newest first, with the lines each fix touched.

LibTIFF tiffcrop tiffcrop.c main memory corruption
CVE-2025-8961 · tools/tiffcrop.c · line 2910 · +1 −1
Medium · CVSS 4.8
EPSS 0.2%2025-08-14
Libtiff: potential integer overflow in raw2tiff.c
CVE-2023-41175 · tools/raw2tiff.c · lines 104–251 · +28 −0 in 2 hunks
Medium · CVSS 6.5
EPSS 1.3%2023-10-05
Segmentation fault in fax3encode in libtiff/tif_fax3.c

CVE-2023-3618 · tools/tiffcrop.c · lines 2825–2832 · +8 −3

Medium · CVSS 6.5

EPSS 1.2%2023-07-12

Get an alert when the next CVE fix lands in debian/tiff, with the patched functions.

Monitor tiff CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in debian/tiff changed by the most CVE fixes.

createCroppedImage2 CVEs · tools/tiffcrop.c t2p_read_tiff_init2 CVEs · tools/tiff2pdf.c PixarLogDecode1 CVEs · libtiff/tif_pixarlog.c TIFFReadRGBAImageOriented1 CVEs · libtiff/tif_getimage.c TIFFRGBAImageGet1 CVEs · libtiff/tif_getimage.c readContigTilesIntoBuffer1 CVEs · tools/tiffcrop.c

All patched functions in debian/tiff

Frequently asked questions

Common questions about CVE fixes to main.

How many CVEs have patched main?: 3 published CVEs changed main in debian/tiff, in 3 distinct patches totalling 41 changed lines, between 2023 and 2025.
What is the latest CVE that changed main?: CVE-2025-8961 (LibTIFF tiffcrop tiffcrop.c main memory corruption), published 2025-08-14, changed lines 2910 of tools/tiffcrop.c.
How does main compare to the rest of debian/tiff?: debian/tiff has 35 CVEs with a located fix in total; 3 of them changed main.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/tiff CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing