CVE-2022-2056

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0

Description The issue is related to a Divide By Zero error in the tiffcrop function of libtiff, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. This can be achieved by a remote attacker.

Recommendations For libtiff version 4.4.0, users who compile libtiff from sources can apply the fix available with commit f3a5e010.