TI-2022-03639 CVE-2022-3970 · GHSA-44v9-23w3-fv66
LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
Priority HIGH 71
A vulnerability was found in LibTIFF.
RHSA-2023:2883
libtiff security update
Released 2023-05-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) libtiff-4.0.9-27.el8, libtiff-devel-4.0.9-27.el8
- Red Hat Enterprise Linux CRB (v. 8) libtiff-tools-4.0.9-27.el8
Fixes 2 records
TI-2022-03337 CVE-2022-3627 · GHSA-g8h6-gmhw-mc7m
Out-of-bounds write in libtiff
Priority MEDIUM 62
LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to cause a denial-of-service via a crafted tiff file.