733 matches found
PT-2022-6887 · Libtiff +7 · Libtiff +7
Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds write in the extractContigSamplesShifted24bits function, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote...
CVE-2022-3627
LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemcpy in libtiff/tifunix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit...
CVE-2022-3599
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125...
PT-2022-6885 · Libtiff +7 · Libtiff +7
Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.4.0 Description: The issue is related to an out-of-bounds write in the TIFFmemcpy function in libtiff/tif unix.c:346 when called from extractImageSection in tools/tiffcrop.c:6826, allowing attackers to cause a...
PT-2022-6897 · Libtiff +6 · Libtiff +6
Name of the Vulnerable Software and Affected Versions: libtiff version 4.4.0 Description: The issue is related to a buffer overflow in the tiffcrop utility of the libtiff library, which can be triggered by a crafted TIFF image file. This may result in an application crash, potential information...
The vulnerability of the LibTIFF library, related to reading beyond the allowed buffer data limits, allows an attacker to cause a service failure.
The vulnerability of the LibTIFF library relates to reading data beyond the acceptable buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created TIFF file...
The vulnerability of the LibTIFF library, related to the lack of use of the assert() function, allows a attacker to trigger a service failure.
The vulnerability of the LibTIFF library is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created TIFF file...
USN-5604-1 tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. CVE-2022-2867, CVE-2022-2869 It was discovered that LibTIFF incorrectly handled certain files. An attacker could possibly u...
DEBIAN-CVE-2022-2521
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...
CVE-2022-2520
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
LibTIFF 资源管理错误漏洞
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for working with TIFF files.A security vulnerability exists in LibTIFF version 4.4.0rc1, which stems from a double-release or corruption found in rotateImage in...
CVE-2022-2519
There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...
CVE-2022-2953
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8...
LibTIFF 缓冲区错误漏洞
LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...
Denial Of Service (DoS)
libtiff.so is vulnerable to denial of service. The vulnerability exists in tiffcrop.c due to improper input validation leading to out of bounds reads and writes which allows an attacker to send crated tiff files causing an application crash...
PT-2022-6892 · Libtiff +9 · Libtiff +9
Name of the Vulnerable Software and Affected Versions: libtiff versions affected versions not specified Description: The issue is related to a uint32 t underflow in the tiffcrop tool of the libtiff library, leading to out of bounds read and write in the extractContigSamples8bits routine. An...
PT-2022-6896 · Libtiff +9 · Libtiff +9
Name of the Vulnerable Software and Affected Versions: libtiff versions affected versions not specified Description: The issue is related to an improper input validation flaw in libtiff's tiffcrop utility. This flaw can lead to an out of bounds read, causing a crash if an attacker supplies a...
PT-2022-6891 · Libtiff +9 · Libtiff +9
Name of the Vulnerable Software and Affected Versions: libtiff affected versions not specified Description: The issue is related to a uint32 t underflow in libtiff's tiffcrop utility, which can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop could cause a...
Medium: libtiff
Issue Overview: Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service out-of-bounds read via a crafted tif file. CVE-2016-9532 A flaw was found in libtiff. Due to a memory allocation failure in...
