CVE-2016-9536 in Apple macOS

Summary

tools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers in t2p_process_jpeg_strip(). Reported as MSVR 35098, aka "t2p_process_jpeg_strip heap-buffer-overflow."

Reservation

11/21/2016

Disclosure

11/22/2016

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
98720	Apple macOS tiffutil out-of-bounds write	787	Not defined	Official fix	CVE-2016-9536
93749	LibTIFF tiff2pdf.c t2p_process_jpeg_strip out-of-bounds write	787	Not defined	Official fix	CVE-2016-9536