Write-what-where Condition

Overview Affected versions of this package are vulnerable to Write-what-where Condition in the TIFFReadRGBAImageOriented function while processing paletted images with malformed metadata. TIFF file. An attacker can achieve arbitrary memory write by convincing a user to open a specially crafted TI...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in t2preadtiffinit when calculating TIFFTAGTILEWIDTH and TIFFTAGTILELENGTH. An attacker can cause a denial of service by providing crafted input that triggers the vulnerable code path. Note: This is result of...

CVE-2022-1622 affecting package libtiff for versions less than 4.4.0-1

CVE-2022-1622 affecting package libtiff for versions less than 4.4.0-1. An upgraded version of the package is available that resolves this issue...

DSA-617-1 libtiff - insufficient input validation

Bulletin has no description...