What the vulnerability does

01Description

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Key dates

02Disclosure timeline

August 31, 2022 CVE published
August 3, 2024 Record updated