CVE-2022-0907

Name of the Vulnerable Software and Affected Versions libtiff version 4.3.0

Description The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial-of-service using a specially crafted tiff file. This can be achieved through the tiffcrop function in libtiff. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For libtiff version 4.3.0, users who compile libtiff from sources can apply the fix available with commit f2b656e2 to resolve the issue. As a temporary workaround, consider disabling the tiffcrop function in libtiff until a patch is available.