CVE-2022-1354 — 脆弱性インテリジェンス

libtiff — libtiff

公表日: 2022-08-31T00:00:00.000Z

CVSS

5.5

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

情報源

• CVE-2022-1354
• Issue Tracking, Third Party Advisory
• Exploit, Issue Tracking, Patch, Third Party Advisory
• Patch
• Exploit, Issue Tracking, Patch, Third Party Advisory
• Mailing List, Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• CVE-2022-1354