Neevia - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/neevia/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 05:47:18 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNeevia docuPrinter Pro: TIFFCP.EXE heap corruption (CVE-2025-55891)https://feed.craftedsignal.io/briefs/2026-10-neevia-docuprinter-pro-heap-corruption/Wed, 28 Oct 2026 05:47:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-neevia-docuprinter-pro-heap-corruption/A public proof-of-concept exploit exists for CVE-2025-55891, a heap corruption vulnerability in Neevia docuPrinter Pro caused by an outdated libtiff library that triggers a crash during malformed LZW decompression.A heap corruption vulnerability (CVE-2025-55891) has been identified in TIFFCP.EXE, a command-line utility bundled with Neevia docuPrinter Pro 7.3 and earlier. The vulnerability stems from the use of libtiff version 3.5.7, which contains an unsafe assertion in the LZW decoding logic (tif_lzw.c). An attacker can trigger a segmentation fault or a STATUS_ACCESS_VIOLATION by supplying a specially crafted TIFF file. This issue affects both the proprietary Windows binary and open-source versions compiled from the affected libtiff code.

Impact

Successful exploitation causes the TIFFCP.EXE process to crash, resulting in a denial-of-service for the application. No special privileges are required to trigger the memory access violation.

Recommendation

  • Inventory systems for installed instances of Neevia docuPrinter Pro version 7.3 and earlier.
  • Apply patches provided by Neevia Technology for docuPrinter Pro as soon as they become available.
  • Implement file-type validation or sandboxed processing for any TIFF images handled by docuPrinter Pro if immediate patching is not possible.
]]>mediumadvisory