Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-7663
4.3
MEDIUMCVSS v2
Published
February 9, 2019
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.
vadz/libtiff
GitHub
GitHub
Docker Hub