Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6358
HistoryMay 23, 2018 - 6:23 a.m.

Invalid Write

2018-05-2306:23:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

EPSS

0.049

Percentile

92.8%

libtiff.so is vulnerable to invalid write attacks. The vulnerability exists in the TIFFReadDirectory function of libtiff/tif_dirread.c where field data for extension tags can be written to invalid memory locations.