How many CVEs have a located fix in vadz/libtiff?

19 published CVEs have a fix traced to functions in vadz/libtiff, touching 7 functions across 17 files.

Which function in vadz/libtiff has been patched by the most CVEs?

readContigStripsIntoBuffer in tools/tiffcrop.c has been changed by 4 CVE fixes, from 2016 to 2017.

How large is a typical CVE fix in vadz/libtiff?

The median fix changes 8 lines. 79% of fixes change 20 lines or fewer, and 68% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#281 of 500 repositories

vadz/libtiff

Name: vadz/libtiff: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix March 12, 2018

19

CVE fixes located

Published CVEs

7

Functions patched

Distinct function sites

17

Files patched

Distinct source files

2013–2018

Years covered

By CVE publication date

Overview

19 published CVEs have a fix traced to functions in vadz/libtiff, the earliest published in 2013. Those fixes changed 7 distinct functions across 17 files, in 95 patch hunks.

Among the 500 repositories tracked here, vadz/libtiff ranks #281 by the number of CVEs with a located fix.

Most patched functions

Functions in vadz/libtiff changed by the most CVE fixes.

Most patched files

Files in vadz/libtiff changed by the most CVE fixes.

1tools/tiffcrop.c5 CVEs · 3 functions
2tools/tiffcp.c5 CVEs · 1 functions
3libtiff/tif_pixarlog.c2 CVEs · 0 functions
4libtiff/tiffiop.h1 CVEs · 1 functions
5libtiff/tif_luv.c1 CVEs · 1 functions
6tools/tiff2pdf.c1 CVEs · 1 functions
7libtiff/tif_dirread.c1 CVEs · 0 functions
8libtiff/tif_next.c1 CVEs · 0 functions
9libtiff/tif_ojpeg.c1 CVEs · 0 functions
10libtiff/tif_predict.c1 CVEs · 0 functions

Fix size

How much code a CVE fix in vadz/libtiff changes, with backports counted once.

8

Median lines changed

Added plus removed, per CVE

79%

Fixes of 20 lines or fewer

Share of CVE fixes

68%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in vadz/libtiff, and the functions each fix changed.

CVE-2014-8130
CVE-2014-8130
Medium · CVSS 6.5
EPSS 3.8%2018-03-12
CVE-2016-5314
CVE-2016-5314
High · CVSS 8.8
EPSS 4.4%2018-03-12
CVE-2016-10268
CVE-2016-10268
High · CVSS 7.8
EPSS 1.8%2017-03-24
CVE-2016-10271
CVE-2016-10271readContigStripsIntoBuffer
High · CVSS 7.8
EPSS 2.2%2017-03-24
CVE-2016-10270
CVE-2016-10270
High · CVSS 7.8
EPSS 2.3%2017-03-24
CVE-2016-10266
CVE-2016-10266tiff
Medium · CVSS 5.5
EPSS 1.7%2017-03-24
CVE-2016-10272
CVE-2016-10272readContigStripsIntoBuffer
High · CVSS 7.8
EPSS 1.9%2017-03-24
CVE-2016-10269
CVE-2016-10269logLuvState
High · CVSS 7.8
EPSS 2.4%2017-03-24
CVE-2016-10267
CVE-2016-10267
Medium · CVSS 5.5
EPSS 1.8%2017-03-24
CVE-2016-10092
CVE-2016-10092readContigStripsIntoBuffer
High · CVSS 7.8
EPSS 2.4%2017-03-01
CVE-2016-10093
CVE-2016-10093
High · CVSS 7.8
EPSS 2.0%2017-03-01
CVE-2016-10094
CVE-2016-10094t2p_readwrite_pdf_image_tile
High · CVSS 7.8
EPSS 1.8%2017-03-01

Get an alert for each new vadz/libtiff CVE, with the patched functions and AI-written analysis.

Monitor libtiff CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

1Panel-dev/MaxKB19 CVEs alextselegidis/easyappointments19 CVEs baserproject/basercms19 CVEs bookstackapp/bookstack19 CVEs cloudfoundry/uaa19 CVEs debian/dovecot19 CVEs debian/nginx19 CVEs debian/openimageio19 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in vadz/libtiff.

How many CVEs have a located fix in vadz/libtiff?: 19 published CVEs have a fix traced to functions in vadz/libtiff, touching 7 functions across 17 files.
Which function in vadz/libtiff has been patched by the most CVEs?: readContigStripsIntoBuffer in tools/tiffcrop.c has been changed by 4 CVE fixes, from 2016 to 2017.
How large is a typical CVE fix in vadz/libtiff?: The median fix changes 8 lines. 79% of fixes change 20 lines or fewer, and 68% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track vadz/libtiff CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing