← Database

CVE-2010-2481

MEDIUM CVSS: 4.3 Published: 2010-07-06 Modified: 2026-06-16

Description

The TIFFExtractData macro in LibTIFF before 3.9.4 does not properly handle unknown tag types in TIFF directory entries, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF file.

Affected Platforms

Libtiff Libtiff

Weakness Type

CWE-119

References