This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-14973 →

DEBIAN-CVE-2019-14973

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior...

Original description

The description as published by the source.

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

Debian:13 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

Debian:14 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.10+git190814-1"}]}]

References

advisory security-tracker.debian.org