CVE-2022-2953

An out-of-bound read flaw was found in LibTIFF, in extractImageSection in the tools/tiffcrop.c:6905, allowing attackers to cause a denial of service via a crafted tiff file...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-2443)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile...

CVE-2021-40165

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code...

The vulnerability of the ImageIO component in operating systems such as iOS, iPadOS, tvOS, watchOS, iCloud for Windows, and the multimedia player iTunes for Windows allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS operating systems, iCloud for Windows service, and the multimedia player iTunes for Windows lies in its ability to read data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2022:3487-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3487-1 advisory. - CVE-2022-3213: Fixed heap buffer overflow when processing a malformed TIFF file bsc1203450. Tenable has...

openSUSE: Security Advisory for ImageMagick (SUSE-SU-2022:3487-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:3487-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2022-3213: Fixed heap buffer overflow when processing a malformed TIFF file bsc1203450...

CVE-2020-36521

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or...

Apple macOS TIFF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreGraphics framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within...

CVE-2022-3213

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service...

CVE-2022-3213

CVE-2022-3213 affects ImageMagick with a heap-buffer overflow when processing malformed TIFF files, potentially causing undefined behavior or a denial of service. The connected sources consistently describe this CVE as part of ImageMagick’s TIFF handling issues, but none of the documents provide ...

CVE-2022-3213

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service...

CVE-2022-3213

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in multiple formats. A security vulnerability exists in ImageMagick that stems from a heap buffer overflow issue. When the application processes an...

The vulnerability of the TIFFFetchStripThing() function in the tif_dirread.c component of the LibTIFF library allows a attacker to cause a service failure.

The vulnerability of the TIFFFetchStripThing function in the tifdirread.c component of the LibTIFF library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created TIFF file...

The vulnerability of the TIFFReadDirectory() function in the tif_dirread.c component of the LibTIFF library allows a attacker to cause a service failure.

The vulnerability of the TIFFReadDirectory function in the tifdirread.c component of the LibTIFF library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created TIFF file...

CVE-2022-3213

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash, causing a denial of service...

The vulnerability of the LibTIFF library, related to the lack of checks for zero division, allows attackers to trigger a service failure.

The vulnerability of the LibTIFF library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created TIFF file...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists due a heap buffer overflow in TIFFReadRawDataStriped function in tiffinfo.c which allows an attacker to cause an application crash via a crafted TIFF file...