CVE-2022-2057

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0

Description The issue is related to a Divide By Zero error in the tiffcrop function of the LibTIFF library. This error can be exploited by a remote attacker to cause a denial-of-service using a specially crafted tiff file. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For libtiff version 4.4.0, users who compile libtiff from sources can apply the fix available with commit f3a5e010. As a temporary workaround, consider restricting the use of the tiffcrop function until a patch is available.