CVE-2018-10779

2018-05-0707:29:00

Google

osv.dev

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.4%

JSON

TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.

CPENameOperatorVersion
libtiffeq3.7.1
tiffeq4.0.3-r3
tiffeq4.0.8-r0
libtiffeq3.7.0beta2
tiffeq4.0.2-r1
libtiffeqRelease-v3-6-1
libtiffeqRelease-v3-7-0beta2
tiffeq4.0.6-r2
libtiffeq3.7.0
tiffeq4.0.9-r1

Name	Operator	Version
libtiff	eq	3.7.1
tiff	eq	4.0.3-r3
tiff	eq	4.0.8-r0
libtiff	eq	3.7.0beta2
tiff	eq	4.0.2-r1
libtiff	eq	Release-v3-6-1
libtiff	eq	Release-v3-7-0beta2
tiff	eq	4.0.6-r2
libtiff	eq	3.7.0
tiff	eq	4.0.9-r1