CVE-2022-2869
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who...
Original description
The description as published by the source.
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-2869 tiff Fixed in: 4.4.0-r0
- BellSoft Alpaquita BELL-CVE-2022-2869
- Debian DEBIAN-CVE-2022-2869 tiff Fixed in: 4.2.0-1+deb11u3
References
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report bugzilla.redhat.com
- web lists.debian.org