Vendors / Tinytiff Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Tinytiff Project records in CISA KEV No Tinytiff Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
Buffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial of service via the TinyTiffReader_readNextFrame function in tinytiffreader.c file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00352 · Published 2023-04-04 · No fix listed CWE-120
Priority MEDIUM 58
A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00414 · Published 2023-03-22 · No fix listed CWE-120
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0