Beveiligingsadvies

CVE-2022-2869

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-17 00:00:00

Laatst bijgewerkt 2024-08-03 00:52:59

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.

← Alle CVE's bekijken Bekijk op cve.org ↗