CVE-2016-9538 in macOS

Summary

tools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer() because of a uint16 integer overflow. Reported as MSVR 35100.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

11/21/2016

Disclosure

11/22/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
98722	Apple macOS tiffutil integer overflow	190	Not defined	Official fix	CVE-2016-9538
93751	LibTIFF tiffcrop.c readContigStripsIntoBuffer integer overflow	190	Not defined	Official fix	CVE-2016-9538

Sources

• MITRE
• NVD
• CVE Details