Search for packages
| purl | pkg:conan/libtiff@4.5.0 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4mhv-7vrm-v7hv
Aliases: CVE-2023-1916 |
Out-of-bounds Read A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x. |
Affected by 0 other vulnerabilities. |
|
VCID-6dt6-ppka-b3ct
Aliases: CVE-2023-26966 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. |
Affected by 0 other vulnerabilities. |
|
VCID-cwen-8yyj-x3aw
Aliases: CVE-2023-25434 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. | There are no reported fixed by versions. |
|
VCID-ju1t-bhyh-v7du
Aliases: CVE-2022-48281 |
Out-of-bounds Write processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. | There are no reported fixed by versions. |
|
VCID-k8kt-55y9-qyac
Aliases: CVE-2023-2908 |
NULL Pointer Dereference A null pointer dereference issue was discovered in Libtiff's tif_dir.c file. This flaw allows an attacker to pass a crafted TIFF image file to the tiffcp utility, which triggers runtime error, causing an undefined behavior, resulting in an application crash, eventually leading to a denial of service. |
Affected by 0 other vulnerabilities. |
|
VCID-ndwc-beev-43ck
Aliases: CVE-2023-26965 |
Out-of-bounds Write loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. |
Affected by 0 other vulnerabilities. |
|
VCID-xmwn-vxux-h7g3
Aliases: CVE-2023-25435 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753. |
Affected by 0 other vulnerabilities. |
|
VCID-z1vf-mhw2-ducs
Aliases: CVE-2023-25433 |
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||