CVE-2022-1210 MEDIUM

CVE-2022-1210: LibTIFF tiff2ps resource consumption

Vendor Unspecified

Product LibTIFF

Weakness CWE-400

Published April 3, 2022

Last update April 15, 2025

View on NVD All CVEs

CVSS base score

4.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 3, 2022 CVE published

April 15, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1210 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/400.html

Related vulnerabilities

04Related CVE

CVE-2026-41840 Spring Framework Denial of Service via Multipart Requests in WebFlux CVE-2026-47902 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400) CVE-2026-5079 multer vulnerable to Denial of Service via deeply nested field names CVE-2026-45169 Idira Privileged Access Manager (PAM) Self-Hosted Vault: Denial of Service due to Unexpected Input Processing CVE-2026-54260 Wagtail: Denial of service via unbounded filter specs in the image preview