CVE-2022-2520

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0rc1

Description A flaw in the rotateImage() function in the tiffcrop.c file at line 8621 can cause a program crash when reading a crafted input due to a sysmalloc assertion failure. This issue is related to an incorrect buffer size calculation, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For libtiff version 4.4.0rc1, consider disabling the rotateImage() function as a temporary workaround until a patch is available to prevent potential crashes when reading crafted inputs.