TI-2022-03639 CVE-2022-3970 · GHSA-44v9-23w3-fv66
LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
Priority HIGH 71
A vulnerability was found in LibTIFF.
RHSA-2023:2340
libtiff security update
Released 2023-05-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) libtiff-4.4.0-7.el9, libtiff-devel-4.4.0-7.el9
- Red Hat Enterprise Linux CRB (v. 9) libtiff-tools-4.4.0-7.el9
Fixes 11 records
TI-2022-03286 CVE-2022-3570 · GHSA-w3vw-h42p-vjw6
Out-of-bounds write in libtiff
Priority HIGH 67
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash…
TI-2022-04245 CVE-2022-4645 · GHSA-6fr2-gj2w-xgr6
Out-of-bounds read in libtiff
Priority MEDIUM 63
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2022-03337 CVE-2022-3627 · GHSA-g8h6-gmhw-mc7m
Out-of-bounds write in libtiff
Priority MEDIUM 62
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2022-03312 CVE-2022-3599 · GHSA-6cg2-4798-gw4g
Out-of-bounds read in libtiff
Priority MEDIUM 62
LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2022-03311 CVE-2022-3598 · GHSA-4cf4-hqwp-cpp8
Out-of-bounds write in libtiff
Priority MEDIUM 62
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2022-03310 CVE-2022-3597 · GHSA-579p-3xv7-xhp3
Out-of-bounds write in libtiff
Priority MEDIUM 62
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2022-03336 CVE-2022-3626 · GHSA-q8fq-52x5-p228
Out-of-bounds write in libtiff
Priority LOW 31
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file.
TI-2023-14587 CVE-2023-30775 · GHSA-jqmx-w3fp-9j6j
Memory corruption in libtiff
Priority LOW 25
A vulnerability was found in the libtiff library.
TI-2023-14586 CVE-2023-30774 · GHSA-3rqj-8cc4-p9rh
Memory corruption in libtiff
Priority LOW 25
A vulnerability was found in the libtiff library.
TI-2023-14127 CVE-2023-30086 · GHSA-9489-j7g7-5xg4
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a…
Priority LOW 25
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.