Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libtiff@4.3.0
purl pkg:conan/libtiff@4.3.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (13)
Advisory Summary Fixed in package version
CVE-2022-1210

Uncontrolled Resource Consumption A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF … There are no reported fixed by versions.
CVE-2022-0561

NULL Pointer Dereference Null source pointer passed as an argument to `memcpy()` function within `TIFFFetchStripThing()` in `tif_dirread.c` in libtiff could … There are no reported fixed by versions.
CVE-2022-0865

Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users … There are no reported fixed by versions.
CVE-2022-0909

Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. … There are no reported fixed by versions.
CVE-2022-0891

Out-of-bounds Write A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger … There are no reported fixed by versions.
CVE-2022-0924

Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For … There are no reported fixed by versions.
CVE-2022-22844

Out-of-bounds Read LibTIFF has an out-of-bounds read in `_TIFFmemcpy` in `tif_unix.c` in certain situations involving a custom tag and `0x0200` … There are no reported fixed by versions.
CVE-2022-1056

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For … There are no reported fixed by versions.
CVE-2022-0907

Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2022-0562

NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within `TIFFReadDirectory()` in `tif_dirread.c` in libtiff versions … There are no reported fixed by versions.
CVE-2022-0908

NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff … There are no reported fixed by versions.
CVE-2022-1623

Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via … There are no reported fixed by versions.
CVE-2022-1622

Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2023-30774
Out-of-bounds Write A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the …