CVE-2022-3570
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.7epss 0.5%
exploitation probability
0.5%top 58% of all CVEs
observed exploitation
nono source reports it
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected products
libtiff · libtiffReferences
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.jsonhttps://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094chttps://gitlab.com/libtiff/libtiff/-/issues/381https://gitlab.com/libtiff/libtiff/-/issues/386https://lists.debian.org/debian-lts-announce/2023/01/msg00018.htmlhttps://security.netapp.com/advisory/ntap-20230203-0002/https://www.debian.org/security/2023/dsa-5333