CVE-2022-1354

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-34526 affecting package libtiff for versions less than 4.4.0-3

CVE-2022-34526 affecting package libtiff for versions less than 4.4.0-3. A patched version of the package is available...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2519

CVE-2022-2519 affects libtiff 4.4.0rc1, with the vulnerability in rotateImage() in tiffcrop.c:8839 causing double free or corruption and potentially crashing the process. Connected advisories confirm this is one of several libtiff issues (including CVE-2022-2520/2521) addressed by vendor updates....

CVE-2022-2519

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for handling TIFF files. libTIFF suffers from a security vulnerability that stems from a stack buffer overflow flaw found in the main function of tiffcp.c. An...

CVE-2022-2519

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

CVE-2022-2521

CVE-2022-2521 affects libtiff (libtiff 4.4.0rc1) with an invalid pointer free in TIFFClose() (tif_close.c:131) called by tiffcrop.c:2522, leading to program crash and denial of service when processing crafted input. Connected advisories (ALAS, Debian DSA, Cloud Foundry USN) confirm multiple libti...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. A security vulnerability exists in LibTIFF, which stems from a heap buffer overflow flaw found in the TIFFReadRawDataStriped function of tiffinfo.c. An attacker could pass a specially crafted TIFF file to the tiffin...

LibTIFF 资源管理错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for working with TIFF files.A security vulnerability exists in LibTIFF version 4.4.0rc1, which stems from a double-release or corruption found in rotateImage in...

CVE-2022-2519: Double Free

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

CVE-2022-2521: Release of Invalid Pointer or Reference

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72102)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...

CVE-2022-2520: Incorrect Calculation of Buffer Size

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2520

Summary: CVE-2022-2520 affects LibTIFF 4.4.0rc1, where a sysmalloc assertion in rotateImage() (tiffcrop.c:8621) can cause a crash when processing crafted input. The connected advisories confirm additional related flaws in the same library (e.g., CVE-2022-2519, CVE-2022-2521, CVE-2022-2868, CVE-20...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...