Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3598
HistoryOct 21, 2022 - 4:15 p.m.

Out-of-bounds

2022-10-2116:15:00
PRIOn knowledge base
www.prio-n.com
10
libtiff
out-of-bounds write
vulnerability
denial-of-service
crafted tiff file
nvd
tiffcrop.c
3604
commit cfbb883b

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.

CPENameOperatorVersion
debian_linuxeq10.0
libtiffle4.4.0