CVE-2022-2521CWE-763

CVE-2022-2521: vulnerability in libtiff

Published · Updated

Follow this CVE+ Monitor libtiff+ Monitor tiff

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.
Affected products
n/a · libtiff