CVE-2022-0891medium

CVE-2022-0891: medium-severity vulnerability in libtiff

Published · Updated

Follow this CVE+ Monitor libtiff+ Monitor tiff

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 1.5%
A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Affected products
libtiff · libtiff
Related CVEs — libtiff

In the same product, most dangerous first.

CVE-2022-1622MEDIUMCVE-2022-1622EPSS 1.7%CVE-2022-0865MEDIUMCVE-2022-0865EPSS 1.5%CVE-2022-3627MEDIUMCVE-2022-3627EPSS 1.4%CVE-2022-0924MEDIUMCVE-2022-0924EPSS 1.3%CVE-2022-0909MEDIUMCVE-2022-0909EPSS 1.3%CVE-2022-2058MEDIUMCVE-2022-2058EPSS 1.3%