CVE-2016-9534 in LibTIFF
Summary
tif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't reset the tif_rawcc and tif_rawcp members. Reported as MSVR 35095, aka "TIFFFlushData1 heap-buffer-overflow."
Reservation
11/21/2016
Disclosure
11/22/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 93747 | LibTIFF tif_write.c TIFFFlushData1 memory corruption | 119 | Not defined | Official fix | CVE-2016-9534 |