CVE-2022-36149

CVE-2022-36149 affects tifig v0.2.2, with a heap-use-after-free in the function temInfoEntry(). The vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists). Impact is described as a heap-based issue; CVSS 3.1 base score is 5.5 (Medium) with LOCAL exploit, user interaction re...

CVE-2022-36155

CVE-2022-36155 affects tifig v0.2.2 with a resource allocation issue in asan_new_delete.cpp (operator new(unsigned long)). The CVE entry notes availability impact as HIGH while confidentiality and integrity remain NONE. Public details consistently describe the issue but do not provide exploit/vec...

CVE-2022-36153

CVE-2022-36153 affects tifig v0.2.2, where a segmentation violation can occur through the use of std::vector::size() in /bits/stl_vector.h. The issue is documented across multiple sources (NVD entry and Red Hat/OSV/CVE lists) consistently describing a memory/segmentation fault in tifig 0.2.2. The...

CVE-2022-36152

CVE-2022-36152 affects tifig v0.2.2, with a memory leak in the asan_new_delete.cpp path (operator new[]). The issue is a memory leak vulnerability in tifig 0.2.2; CVSS shows local access required, low attack complexity, with availability impact high. Connected documents consistently identify the ...

CVE-2022-36151

CVE-2022-36151 affects tifig v0.2.2, with a segmentation/ crash via getType() in /common/bbox.cpp. Affected component: tifig (HEIF thumbnail converter). Root cause: memory access error in getType(); exploit status not detailed in the provided docs. Impact per CVSS: local access, user interaction ...

CVE-2022-36150

CVE-2022-36150 affects the tifig package (v0.2.2). The vulnerability is a heap-buffer overflow caused by an overflow in memory operations, reported via __asan_memmove in /asan/asan_interceptors_memintrinsics.cpp. Public descriptions consistently identify tifig v0.2.2 as vulnerable and do not spec...