An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocat...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 tiff

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org