CVE-2022-2058

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0

Description The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can be achieved by a remote attacker using a specially designed tiff file.

Recommendations For version 4.4.0, users who compile libtiff from sources can apply the fix available with commit f3a5e010. At the moment, there is no information about a newer version that contains a fix for this vulnerability.