CVE-2022-2869

Name of the Vulnerable Software and Affected Versions libtiff versions (affected versions not specified)

Description The issue is related to a uint32 t underflow in the tiffcrop tool of the libtiff library, leading to out of bounds read and write in the extractContigSamples8bits routine. An attacker could trigger this flaw by supplying a crafted file to tiffcrop, potentially causing a crash or further exploitation. This could be achieved by tricking a user into opening the crafted file with tiffcrop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.