CVE-2022-22844
Published: 10 January 2022
LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.
Priority
Negligible
CVSS 3 base score: 5.5
Notes
| Author | Note |
|---|---|
| mdeslaur | this is only a DoS in the tiffset command-line tool |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22844
- https://gitlab.com/libtiff/libtiff/-/merge_requests/287
- NVD
- Launchpad
- Debian