CVE-2022-0909

Name of the Vulnerable Software and Affected Versions libtiff version 4.3.0

Description The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service.

Recommendations For libtiff version 4.3.0, the fix is available with commit f8d0f9aa for users who compile libtiff from sources.