CVE-2025-9900

32

FAUCET Score

CVE-2025-9900 is a high-severity write-what

Impacted Technologies

Vendor	Product	Version(s)	CPE
Red Hat	Red Hat Enterprise Linux 8	Range not provided by sourceCNA affecteddefault affected
Red Hat	Red Hat Enterprise Linux 9	Range not provided by sourceCNA affecteddefault affected
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Range not provided by sourceCNA affecteddefault affected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Range not provided by sourceCNA affecteddefault affected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Range not provided by sourceCNA affecteddefault affected

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

2.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.74%

Probability of exploitation in next 30 days

EPSS Percentile

50.8%

Percentile rank of EPSS score among Peer Group

As of 2026-07-25

Model: v2026.06.15

This CVE's current EPSS score of 0.0074 is in the 53rd percentile among its peer group of 14,848 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (45)

microsoftpatch availablevia msrc

Product: azl3 libtiff 4.6.0-8 on Azure Linux 3.0Fixed in: 4.6.0-9

microsoftpatch availablevia msrc

Product: 20397-17086Fixed in: 4.6.0-9

microsoftpatch availablevia msrc

Product: 20415-17084Fixed in: 4.6.0-9

microsoftpatch availablevia msrc

Product: cbl2 libtiff 4.6.0-8 on CBL Mariner 2.0Fixed in: 4.6.0-9

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: compat-libtiff3-0:3.9.4-14.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: libtiff-0:4.0.9-35.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: mingw-libtiff-0:4.0.9-3.el8_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: compat-libtiff3-0:3.9.4-13.el8_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: libtiff-0:4.0.9-17.el8_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: spice-client-win-0:8.10-3.el8_2.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: compat-libtiff3-0:3.9.4-13.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: libtiff-0:4.0.9-18.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: spice-client-win-0:8.10-3.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: compat-libtiff3-0:3.9.4-13.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: libtiff-0:4.0.9-18.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnFixed in: spice-client-win-0:8.10-3.el8_4.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: compat-libtiff3-0:3.9.4-13.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: libtiff-0:4.0.9-21.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: spice-client-win-0:8.10-3.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: compat-libtiff3-0:3.9.4-13.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: libtiff-0:4.0.9-21.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: spice-client-win-0:8.10-3.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: compat-libtiff3-0:3.9.4-13.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: libtiff-0:4.0.9-21.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: spice-client-win-0:8.10-3.el8_6.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: compat-libtiff3-0:3.9.4-13.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: libtiff-0:4.0.9-29.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceFixed in: spice-client-win-0:8.10-3.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: compat-libtiff3-0:3.9.4-13.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: libtiff-0:4.0.9-29.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsFixed in: spice-client-win-0:8.10-3.el8_8.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: libtiff-0:4.4.0-13.el9_6.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: libtiff-0:4.4.0-15.el9_7.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: libtiff-0:4.2.0-3.el9_0.2

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsFixed in: libtiff-0:4.4.0-8.el9_2.4

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: libtiff-0:4.4.0-12.el9_4.4

redhatpatch availablevia redhat_api

Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-cuda-rhel9:sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b

redhatpatch availablevia redhat_api

Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/vllm-rocm-rhel9:sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57

redhatpatch availablevia redhat_api

Product: Red Hat AI Inference Server 3.2Fixed in: rhaiis/model-opt-cuda-rhel9:sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: libtiff-0:4.6.0-6.el10_0.1

redhatpatch availablevia redhat_api

Product: Red Hat Discovery 2Fixed in: discovery/discovery-ui-rhel9:sha256:69cb9c84b806ee2f448bdbbcf3174855432f5caec8f31ca2a345655da4a72f57

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 10Fixed in: libtiff-0:4.6.0-6.el10_1.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: compat-libtiff3-0:3.9.4-12.el7_9.1

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: libtiff-0:4.0.3-35.el7_9.1

grafanavendor investigatingvia llm_extracted

Vendor Advisories (3)

grafanallm-grafana-3bfe68bd8f94bc6dCRITICAL

HP ThinPro 8.1 SP9 Security Updates

redhatCVE-2025-9900Important

libtiff: Libtiff Write-What-Where

microsoft2025-Sep/CVE-2025-9900Important

Libtiff: libtiff write-what-where

References

lists.debian.org / debian-lts-announce/2025/09/msg00031.html

openwall.com / lists/oss-security/2025/09/26/3

access.redhat.com / errata/RHSA-2025:17651

access.redhat.com / errata/RHSA-2025:17675

access.redhat.com / errata/RHSA-2025:17710

access.redhat.com / errata/RHSA-2025:17738

access.redhat.com / errata/RHSA-2025:17739

access.redhat.com / errata/RHSA-2025:17740

access.redhat.com / errata/RHSA-2025:19113

access.redhat.com / errata/RHSA-2025:19156

access.redhat.com / errata/RHSA-2025:19276

access.redhat.com / errata/RHSA-2025:19906

access.redhat.com / errata/RHSA-2025:19947

access.redhat.com / errata/RHSA-2025:20956

access.redhat.com / errata/RHSA-2025:20998

access.redhat.com / errata/RHSA-2025:21060

access.redhat.com / errata/RHSA-2025:21061

access.redhat.com / errata/RHSA-2025:21062

access.redhat.com / errata/RHSA-2025:21407

access.redhat.com / errata/RHSA-2025:21506

access.redhat.com / errata/RHSA-2025:21507

access.redhat.com / errata/RHSA-2025:21508

access.redhat.com / errata/RHSA-2025:21994

access.redhat.com / errata/RHSA-2025:23078

access.redhat.com / errata/RHSA-2025:23079

access.redhat.com / errata/RHSA-2025:23080

access.redhat.com / errata/RHSA-2026:0001

access.redhat.com / errata/RHSA-2026:0076

access.redhat.com / errata/RHSA-2026:0077

access.redhat.com / errata/RHSA-2026:0078

access.redhat.com / errata/RHSA-2026:3461

access.redhat.com / errata/RHSA-2026:3462

access.redhat.com / errata/RHSA-2026:7504

access.redhat.com / security/cve/CVE-2025-9900

bugzilla.redhat.com / show_bug.cgi

github.com / SexyShoelessGodofWar/LibTiff-4.7.0-Write-What-Where

gitlab.com / libtiff/libtiff/-/issues/704

gitlab.com / libtiff/libtiff/-/merge_requests/732

libtiff.gitlab.io / libtiff/releases/v4.7.1.html