CVE-2016-9535 Memory corruption in n/a

Critical 9.8 Published 22 Nov 2016 Updated 29 May 2026

A heap-buffer-overflow in libtiff allows attackers to execute arbitrary code or cause denial of service via crafted TIFF images.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-9535?

CVE-2016-9535 is a critical memory corruption vulnerability in Libtiff Libtiff, published on 22 Nov 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."

Weakness: CWE-119

Which versions are affected by CVE-2016-9535?

It affects 1 product.

Products include Libtiff Libtiff.

How do I fix CVE-2016-9535?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2016-9535 being exploited?

There is no known exploitation of CVE-2016-9535 in the wild and no public exploit code.

All Libtiff Libtiff vulnerabilities

Sources

Also known as DEBIAN-CVE-2016-9535, GHSA-9mr5-78vv-g6xr, UBUNTU-CVE-2016-9535.