CVE-2022-34526

Name of the Vulnerable Software and Affected Versions Tiffsplit versions 4.4.0 and earlier

Description The issue is related to a stack overflow in the TIFFVGetField function of the LibTIFF library, which can be exploited by an attacker to cause a Denial of Service (DoS) using a specially crafted TIFF file. This can be achieved when the file is parsed by utilities such as tiffsplit or tiffcrop.

Recommendations For Tiffsplit version 4.4.0 and earlier, consider updating to a version that fixes the issue in the TIFFVGetField function to prevent potential Denial of Service attacks. As a temporary workaround, restrict the use of tiffsplit and tiffcrop utilities until a patch is available.