LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72098)

LibTIFF is a library for reading and writing TIFF (Tagged Image File Format) files. A security vulnerability exists in LibTIFF, which stems from a heap buffer overflow flaw found in the TIFFReadRawDataStriped() function of tiffinfo.c. An attacker could pass a specially crafted TIFF file to the tiffinfo tool to trigger a denial of service. An attacker could exploit this flaw to pass specially crafted TIFF files to the tiffinfo tool, which could trigger a heap buffer overflow issue resulting in a denial of service.