CVE-2022-2953

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0

Description The issue is related to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c:6905, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can allow a remote attacker to cause a service disruption using a specially formed file.

Recommendations For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit 48d6ece8. At the moment, there is no information about a newer version that contains a fix for this vulnerability.