CVE-2022-48281

Published on: Not Yet Published

Last Modified on: 01/30/2023 01:15:00 AM UTC

CVE-2022-48281

The following vulnerability was found:

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

CVE-2022-48281 has been assigned by [email protected] to track the vulnerability

CVE References

Description	Tags ^ⓘ	Link
heap-buffer-overflow /home/a13579/fuzz_lib_tiff/report/libtiff_asan/libtiff/tif_unix.c:362 in _TIFFmemset in branch 38a58201 (#488) · Issues · libtiff / libtiff · GitLab	gitlab.com text/html	MISC gitlab.com/libtiff/libtiff/-/issues/488
Debian -- Security Information -- DSA-5333-1 tiff	www.debian.org Depreciated Link text/html	DEBIAN DSA-5333
Merge branch 'tiffcrop_fix_#488' into 'master' (d1b6b9c1) · Commits · libtiff / libtiff · GitLab	gitlab.com text/html	MISC gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].

Related QID Numbers

181520 Debian Security Update for tiff (DSA 5333-1)
753590 SUSE Enterprise Linux Security Update for tiff (SUSE-SU-2023:0199-1)

Exploit/POC from Github

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of …

There are no known software configurations (CPEs) currently associated with this CVE

No vendor comments have been submitted for this CVE

Social Mentions

Source	Title	Posted (UTC)
@CVEreport	CVE-2022-48281 : processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflo… twitter.com/i/web/status/1…	2023-01-23 03:01:15
/r/netcve	CVE-2022-48281	2023-01-23 03:38:45