CVE-2020-19131

2021-09-0715:15:07

Google

osv.dev

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

JSON

Buffer Overflow in LibTiff v4.0.10 allows attackers to cause a denial of service via the “invertImage()” function in the component “tiffcrop”.

CPENameOperatorVersion
libtiffeq4.0.7
libtiffeq4.0.0beta7
libtiffeq3.6.0beta2
libtiffeq4.0.3
libtiffeq3.7.0
libtiffeq4.0.8
libtiffeq3.5.4
libtiffeq3.7.0alpha
libtiffeq4.0.1
libtiffeq4.0.0alpha

Name	Operator	Version
libtiff	eq	4.0.7
libtiff	eq	4.0.0beta7
libtiff	eq	3.6.0beta2
libtiff	eq	4.0.3
libtiff	eq	3.7.0
libtiff	eq	4.0.8
libtiff	eq	3.5.4
libtiff	eq	3.7.0alpha
libtiff	eq	4.0.1
libtiff	eq	4.0.0alpha

Rows per page:

1-10 of 351

References

blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elibtiff%E4%B8%ADinvertimage%E5%87%BD%E6%95%B0%E5%A0%86%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%88%86%E6%9E%90/

bugzilla.maptools.org/show_bug.cgi?id=2831

lists.debian.org/debian-lts-announce/2021/10/msg00004.html