Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2022-00827 CVE-2022-0924 · GHSA-3h8g-q3cw-mr42

Out-of-bounds read in libtiff

Priority LOW 28

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0133 Published 2022-03-11 Partial fix CWE-125
Priority LOW 36

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0125 Published 2022-03-11 Partial fix CWE-476
TI-2022-00795 CVE-2022-0891 · GHSA-ppwc-w499-gfmh

Out-of-bounds write in libtiff

Priority LOW 34

A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01542 Published 2022-03-09 Partial fix CWE-787
TI-2022-00771 CVE-2022-0865 · GHSA-6x45-qmh6-q92p

Reachable assertion in libtiff

Priority LOW 32

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01478 Published 2022-03-07 Partial fix CWE-617