Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

pearu/pylibtiff

              master @ b619f19
            

Fixes

CVEs

MEDIUM

Peak severity

33.3%

Coverage

Highlights

Denial of Service: 3 prior fixes. Scrutinize any change in this area.

libtiff/tiff_file.py: most-fixed (2 issues). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Denial of Service: Incomplete resource cleanup when closing TIFF files leads to memory and file descriptor leaks. Specifically, memory-mapped references via numpy.memmap and IFD entries can remain open, leading to memory exhaustion under sustained processing workloads.

Denial of Service: Unbounded memory leaks occur during the decoding of LZW-compressed TIFF streams when the decompression state is not properly torn down, failing to release allocated memory structures.