Lucene search

K
cvelistMitreCVELIST:CVE-2014-9655
HistoryApr 13, 2016 - 5:00 p.m.

CVE-2014-9655

2016-04-1317:00:00
mitre
www.cve.org

6.4 Medium

AI Score

Confidence

High

0.057 Low

EPSS

Percentile

93.4%

The (1) putcontig8bitYCbCr21tile function in tif_getimage.c or (2) NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted TIFF image, as demonstrated by libtiff-cvs-1.tif and libtiff-cvs-2.tif.