Skip to content
OpenAdvisories
Medium USN-5743-2 1 CVE

tiff vulnerability

Published Dec 1, 2022 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

USN-5743-1 fixed a vulnerability in LibTIFF. This update provides the
corresponding updates for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS and Ubuntu 22.10.

Original advisory details:

It was discovered that LibTIFF incorrectly handled certain malformed
images. If a user or automated system were tricked into opening a specially
crafted image, a remote attacker could crash the application, leading to a
denial of service, or possibly execute arbitrary code with user privileges.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS tiff 4.0.9-5ubuntu0.9
Ubuntu · 20.04 LTS 20.04:LTS tiff 4.1.0+git191117-2ubuntu0.20.04.7
Ubuntu · 22.04 LTS 22.04:LTS tiff 4.3.0-6ubuntu0.3

Vulnerabilities 1

  • Medium 6.3
    CVE-2022-3970

    LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

    A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit…

    tiff tiff tiff libtiff Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2022-3970