CVE-2022-2520

6.5

MEDIUMCVSS v3

Published

August 31, 2022

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 4.4.0NVD

rzkn/libtiff

GitLab

= 4.4.0NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= 4.4.0NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 4.4.0NVD

Security Advisories

CVE-2022-2520

Description

More on this CVE