CVE-2022-2867

Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)

Description The issue is related to a uint32 t underflow in libtiff's tiffcrop utility, which can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop could cause a crash or potentially further exploitation. This can be achieved by tricking a user into running tiffcrop on the crafted file with specific parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.