← Database

CVE-2024-7006

HIGH CVSS: 7.5 Published: 2024-08-12 Modified: 2026-06-17

Description

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

Affected Platforms

Redhat Enterprise Linux For Arm 64Libtiff LibtiffRedhat Enterprise LinuxRedhat Enterprise Linux Server AusRedhat Enterprise Linux For Power Little Endian Eus

Weakness Type

CWE-476, CWE-476

References