CVE-2022-0908 in LibTIFF

Resumen (Inglés)

Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

GitLab Inc.

Reservar

2022-03-10

Divulgación

2022-03-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
194765	LibTIFF tif_dirread.c TIFFFetchNormalTag denegación de servicio	476	No está definido	Arreglo oficial	CVE-2022-0908

Fuentes

• MITRE
• NVD
• CVE Details