Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Multiple security vulnerabilities have been identified in the libtiff library used for manipulating TIFF files in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include a use-after-free vulnerability (CVE-2025-8176), a buffer overflow (CVE-2025-8177), and a write-what-where condition (CVE-2025-9900). Red Hat has issued an important security advisory with updates to address these issues. The vulnerabilities are rated with a high security impact. The advisory provides updated libtiff packages to remediate these flaws.

The libtiff library in Red Hat Enterprise Linux 7 Extended Lifecycle Support contains three security vulnerabilities: a use-after-free (CVE-2025-8176), a buffer overflow (CVE-2025-8177), and a write-what-where vulnerability (CVE-2025-9900). These flaws could potentially be exploited to cause memory corruption or arbitrary code execution. Red Hat Product Security has released updated libtiff packages to fix these issues, as detailed in advisory RHSA-2025:21407. The advisory covers multiple architectures including x86_64, s390x, ppc64, and ppc64le. No CVSS scores are provided in the advisory, but the impact is rated as important/high. No known exploits in the wild have been reported at this time.

Detailed information about Red Hat Security Advisory: libtiff security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detai

Red Hat Security Advisory: libtiff security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:21407

https://access.redhat.com/security/updates/classification/#important

2383598

2383608

2392784

Canonical URL

Red Hat Security Advisory: libtiff security update

libtiff

A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-8177 is a buffer overflow vulnerability identified in LibTIFF versions up to 4.7.0, specifically affecting the 'setrow' function within the file tools/thumbnail.c. LibTIFF is a widely used open-source library for reading and writing TIFF (Tagged Image File Format) files, commonly integrated into various image processing tools and software. The vulnerability arises due to improper handling of buffer boundaries in the setrow function, which can lead to memory corruption when manipulated locally. Exploitation requires local access with at least low privileges (PR:L), and no user interaction is necessary. The vulnerability has a CVSS 4.0 base score of 4.8, categorized as medium severity, reflecting limited attack vector (local), low complexity, and partial impact on confidentiality, integrity, and availability. Notably, this vulnerability affects only unsupported versions of LibTIFF, meaning that actively maintained versions are not impacted. There are no known exploits in the wild, and the maintainer has released a patch (commit e8c9d6c616b19438695fd829e58ae4fde5bfbc22) to address the issue. The vulnerability does not require user interaction and does not affect the scope beyond the local system. Given the local attack vector, exploitation would typically require an attacker to have some form of access to the target system, such as through compromised credentials or physical access. The buffer overflow could potentially allow an attacker to execute arbitrary code or cause a denial of service by crashing the application using the vulnerable LibTIFF version. However, the impact is limited by the need for local access and the lack of remote exploitation capability.

Detailed information about CVE-2025-8177: Buffer Overflow in LibTIFF affecting null LibTIFF. Get real-time updates, technical details, and mitigation strategies

CVE-2025-8177: Buffer Overflow in LibTIFF - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8177: Buffer Overflow in LibTIFF


Red Hat Security Advisory: libtiff security updateCVE-2025-8176 0 Multiple security vulnerabilities have been identified in the libtiff library used for manipulating TIFF files in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include a use-after-free vulnerability (CVE-2025-8176), a buffer overflow (CVE-2025-8177), and a write-what-where condition (CVE-2025-9900). Red Hat has issued an important security advisory with updates to address these issues. The vulnerabilities are rated with a high security impact. The advisory provides updated libtiff packages to remediate these flaws. HighVulnerability#gcve #csaf #cve-2025-8176 Join the discussion	GCVE Database	11/17/2025, 01:24:48 UTC Added: 06/25/2026, 05:54:32 UTC
CVE-2025-8177: Buffer Overflow in LibTIFFCVE-2025-8177 0 A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file tools/thumbnail.c. The manipulation leads to buffer overflow. An attack has to be approached locally. The patch is named e8c9d6c616b19438695fd829e58ae4fde5bfbc22. It is recommended to apply a patch to fix this issue. This vulnerability only affects products that are no longer supported by the maintainer. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-8177 Join the discussion	CVE Database V5	07/26/2025, 04:02:07 UTC Added: 07/26/2025, 04:17:45 UTC

Threats Tagged 'cve-2025-8177'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-8177'

Lead Pen Test Professional