Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40749
HistoryMay 31, 2023 - 12:04 p.m.

NULL Pointer Dereference

2023-05-3112:04:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
libtiff
lzwdecode
vulnerability
tiff file
application crash
software

0.001 Low

EPSS

Percentile

32.2%

libtiff.so is vulnerable to a NULL Pointer Dereference. The vulnerability exists due to the LZWDecode function in libtiff/tif_lzw.c, which allows an attacker to decompress a crafted TIFF file, resulting in a application crash.

CPENameOperatorVersion
libtiff.sole6.0.0
libtiff.sole6.0.0