DEBIAN-CVE-2022-1355

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

Input validation

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2519

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

Double free

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

CVE-2022-1355

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service...

CVE-2022-1354

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

Double free

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-34526 affecting package libtiff for versions less than 4.4.0-3

CVE-2022-34526 affecting package libtiff for versions less than 4.4.0-3. A patched version of the package is available...

LibTIFF 资源管理错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for working with TIFF files.A security vulnerability exists in LibTIFF version 4.4.0rc1, which stems from a double-release or corruption found in rotateImage in...

CVE-2022-2519

CVE-2022-2519 affects libtiff 4.4.0rc1, with the vulnerability in rotateImage() in tiffcrop.c:8839 causing double free or corruption and potentially crashing the process. Connected advisories confirm this is one of several libtiff issues (including CVE-2022-2520/2521) addressed by vendor updates....

CVE-2022-2519

There is a double free or corruption in rotateImage at tiffcrop.c:8839 found in libtiff 4.4.0rc1...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

CVE-2022-2521

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...

LibTIFF Buffer Overflow Vulnerability (CNVD-2022-72102)

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from a security vulnerability that stems from the lack of proper validation of user-supplied data by extractImageSection...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for handling TIFF files. libTIFF suffers from a security vulnerability that stems from a stack buffer overflow flaw found in the main function of tiffcp.c. An...

CVE-2022-2521

CVE-2022-2521 affects libtiff (libtiff 4.4.0rc1) with an invalid pointer free in TIFFClose() (tif_close.c:131) called by tiffcrop.c:2522, leading to program crash and denial of service when processing crafted input. Connected advisories (ALAS, Debian DSA, Cloud Foundry USN) confirm multiple libti...

CVE-2022-2520

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...