vulnerability
Ubuntu: (Multiple Advisories) (CVE-2022-2521): LibTIFF vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
7 | (AV:N/AC:M/Au:N/C:N/I:N/A:C) | Aug 31, 2022 | Nov 8, 2022 | Jan 28, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
Aug 31, 2022
Added
Nov 8, 2022
Modified
Jan 28, 2025
Description
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.
Solution
ubuntu-pro-upgrade-libtiff-tools

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.