Skip to content
OpenAdvisories
Medium USN-5743-1 1 CVE

tiff vulnerability

Published Nov 24, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS tiff 4.0.6-1ubuntu0.8+esm8

Vulnerabilities 1

  • Medium 6.3
    CVE-2022-3970

    LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

    A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit…

    tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-3970