Maple Labs

CVE search · CVE-2022-3570

CVE-2022-3570

medium 5.5

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@gitlab.com
Weakness
CWE-787

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H cve@gitlab.comSecondary
CVSS 3.1 medium 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References