tiff vulnerabilities

2023-11-2321:06:23

Google

osv.dev

libtiff

denial of service

memory leak

6.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

JSON

It was discovered that LibTIFF could be made to run into an infinite loop.
If a user or an automated system were tricked into opening a specially
crafted image file, an attacker could possibly use this issue to cause a
denial of service. (CVE-2022-40090)

It was discovered that LibTIFF could be made leak memory. If a user or an
automated system were tricked into opening a specially crafted image file,
an attacker could possibly use this issue to cause a denial of service.
(CVE-2023-3576)