Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40190
HistoryApr 19, 2023 - 12:07 p.m.

Out-of-bounds Read

2023-04-1912:07:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
libtiff vulnerability heapbasedbufferoverflow extractimagesection tiffcrop.c maliciouscodefile softwareoutofread

EPSS

0.001

Percentile

18.8%

libtiff.so is vulnerable to Out-of-bounds Read. The vulnerability exists due to a heap based buffer overflow in extractImageSection function in tiffcrop.c which allows an attacker to submit a malicious code file into the system and perform out of read.