CVE-2022-2521

2022-08-3100:00:00

CWE-763

redhat

www.cve.org

libtiff

invalid pointer

denial of service

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

47.0%

JSON

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "libtiff",
    "versions": [
      {
        "version": "libtiff 4.4.0rc1",
        "status": "affected"
      }
    ]
  }
]