ALPINE-CVE-2016-5652 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2016-5652 PUBLISHED CVSS 7 HIGH

An exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's TIFF2PDF tool. A crafted TIFF document can lead to a heap-based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved TIFF file delivered by other means.

Risk Scores

CVSS v3.0

7

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Alpine:v3.4	tiff	3.9.5-r1, 3.9.5-r0, 3.8.2-r4
Alpine:v3.2	tiff	4.0.2-r1, 3.8.2-r0, 3.8.2-r1
Alpine:v3.3	tiff	4.0.6-r4, 4.0.6-r3, 4.0.6-r1

Timeline

Jan 6, 2017 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2016-5652 advisory

Open in Interactive Console →