CVE-2018-3859

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability...

CVE-2018-3860

An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerability...

CVE-2018-3860

The combined documents identify CVE-2018-3860 as an exploitable out-of-bounds write in Canvas Draw 4.0.0, specifically in the TIFF parsing functionality. A specially crafted TIFF image processed by Canvas Draw can cause an out-of-bounds write, overwriting data and enabling code execution. This vu...