PT-2016-7772
CVE-2016-9538
·
Published
2016-11-22
·
Updated
2024-06-15
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
libtiff version 4.0.6
Description
The issue arises from a uint16 integer overflow in the readContigStripsIntoBuffer() function, located in tools/tiffcrop.c, causing the program to read an undefined buffer.
Recommendations
For libtiff version 4.0.6, consider updating to a newer version that addresses this issue, as the current version is affected by the integer overflow in the readContigStripsIntoBuffer() function.
Found an issue in the description? Have something to add? Feel free to write us 👾