← Database

CVE-2022-2953

MEDIUM CVSS: 5.5 Published: 2022-08-29 Modified: 2026-06-17

Description

LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 48d6ece8.

Affected Platforms

Netapp Ontap Select Deploy Administration UtilityLibtiff LibtiffDebian Debian Linux

Weakness Type

CWE-125

References