← Database

CVE-2022-1354

MEDIUM CVSS: 5.5 Published: 2022-08-31 Modified: 2026-06-17

Description

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.

Affected Platforms

Netapp Ontap Select Deploy Administration UtilityLibtiff LibtiffRedhat Enterprise LinuxFedoraproject FedoraDebian Debian Linux

Weakness Type

CWE-125, CWE-787

References