CVE-2022-0907 in LibTIFF

Summary

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.

Responsible

GitLab Inc.

Reservation

03/10/2022

Disclosure

03/11/2022

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
194762	LibTIFF tiffcrop null pointer dereference	476	Not defined	Official fix	CVE-2022-0907