tif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual tile size like YCbCr with subsampling. Reported as MSVR 35105, aka "Predictor heap-buffer-overflow."

Published: 2016-11-22

CVSS: 9.8

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Exploit for CVE-2016-9535 here:

Use Tor Browser to access .onion links.

Check our team here:

https://tatramed.sk/exploit-299-cve-2018-8174/

https://tatramed.sk/exploit-661-cve-2023-45803/

https://tatramed.sk/exploit-929-cve-2022-4304/

https://tatramed.sk/exploit-47-cve-2016-6329/