CVE-2018-3858

Name of the Vulnerable Software and Affected Versions Canvas Draw version 4.0.0

Description A heap overflow exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to execute code by delivering a malicious TIFF image.

Recommendations For Canvas Draw version 4.0.0, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider avoiding the use of TIFF images in the application until a patch is available.