VDB
JLSEC-2025-320
JLSEC-2025-320
PUBLISHED
CVSS 1 LOW
Record from OSV · Published November 25, 2025
A vulnerability classified as problematic was found in libtiff 4.6.0
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Libtiff_jll | juliahub.com | 4.7.0+0 |
| Libtiff_jll | pkg.julialang.org | 4.7.0+0 |
Risk scores
CVSS 2.0
1
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Julia | Libtiff_jll | 4.6.0+0 |
| Julia | Libtiff_jll | 4.6.0+0 |
Timeline
- Nov 25, 2025 CVE Published
- Jul 25, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln JLSEC-2025-320
vulnetix vdb fixes JLSEC-2025-320Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/JLSEC-2025-320/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://www.libtiff.org/ url
- https://drive.google.com/file/d/15JPA3kLYiYD-nRNJ8y8HmnYjhv9NE7k6/view?usp=drive_link url
- https://gitlab.com/libtiff/libtiff/-/commit/6ba36f159fd396ad11bf6b7874554197736ecc8b url
- https://gitlab.com/libtiff/libtiff/-/issues/718 url
- https://gitlab.com/libtiff/libtiff/-/merge_requests/746 url
- https://vuldb.com/?ctiid.318664 url
- https://vuldb.com/?id.318664 url
- https://vuldb.com/?submit.617831 url