CVE-2022-0924

Name of the Vulnerable Software and Affected Versions libtiff version 4.3.0

Description The issue is related to an out-of-bounds read error in the tiffcp component of libtiff, which allows attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service.

Recommendations For version 4.3.0, users who compile libtiff from sources can apply the fix available with commit 408976c4.