CVE-2022-1354 — Vulnerability intelligence

libtiff — libtiff

Published: 2022-08-31T00:00:00.000Z

CVSS

5.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Sources

• CVE-2022-1354
• Issue Tracking, Third Party Advisory
• Exploit, Issue Tracking, Patch, Third Party Advisory
• Patch
• Exploit, Issue Tracking, Patch, Third Party Advisory
• Mailing List, Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• Third Party Advisory
• CVE-2022-1354