Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:conan/libtiff@4.4.0
purl pkg:conan/libtiff@4.4.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (26)
Advisory Summary Fixed in package version
CVE-2022-2520

Reachable Assertion A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that … There are no reported fixed by versions.
CVE-2022-2521

Release of Invalid Pointer or Reference It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation … There are no reported fixed by versions.
CVE-2023-30775

Out-of-bounds Write A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, … There are no reported fixed by versions.
CVE-2022-2056

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. … There are no reported fixed by versions.
CVE-2022-2519

Double Free There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1 There are no reported fixed by versions.
CVE-2022-2057

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. … There are no reported fixed by versions.
CVE-2022-2058

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. … There are no reported fixed by versions.
CVE-2022-34526

Out-of-bounds Write A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause … There are no reported fixed by versions.
CVE-2022-3598

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0795

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0802

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0796

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2022-3597

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6826, allowing attackers to … There are no reported fixed by versions.
CVE-2023-0804

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0803

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2022-4645

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0798

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2022-3626

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to … There are no reported fixed by versions.
CVE-2022-3570

Out-of-bounds Write Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or … There are no reported fixed by versions.
CVE-2022-3627

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:6860, allowing attackers to … There are no reported fixed by versions.
CVE-2022-2953

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2022-3599

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
CVE-2023-0801

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to … There are no reported fixed by versions.
CVE-2023-0799

Use After Free LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via … There are no reported fixed by versions.
CVE-2023-0797

Out-of-bounds Read LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to … There are no reported fixed by versions.
CVE-2023-0800

Out-of-bounds Write LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a … There are no reported fixed by versions.
Vulnerabilities fixed by this package (19)

Advisory Summary Aliases
CVE-2022-2869
Out-of-bounds Read libtiff's tiffcrop tool has a uint32_t underflow which leads to out-of-bounds read and write in the extractContigSamples8bits routine. …
CVE-2022-2867
Out-of-bounds Read libtiff's tiffcrop utility has a uint32_t underflow that can lead to out-of-bounds read and write. An attacker who …
CVE-2022-1210
Uncontrolled Resource Consumption A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF …
CVE-2022-0561
NULL Pointer Dereference Null source pointer passed as an argument to `memcpy()` function within `TIFFFetchStripThing()` in `tif_dirread.c` in libtiff could …
CVE-2022-1355
Improper Restriction of Operations within the Bounds of a Memory Buffer A stack buffer overflow flaw was found in Libtiffs' …
CVE-2022-0865
Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users …
CVE-2022-0909
Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. …
CVE-2022-0891
Out-of-bounds Write A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger …
CVE-2022-0924
Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For …
CVE-2022-22844
Out-of-bounds Read LibTIFF has an out-of-bounds read in `_TIFFmemcpy` in `tif_unix.c` in certain situations involving a custom tag and `0x0200` …
CVE-2022-1056
Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For …
CVE-2022-2868
Improper Input Validation libtiff's tiffcrop utility has a improper input validation flaw that can lead to out-of-bounds read and ultimately …
CVE-2022-0907
Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a …
CVE-2022-0562
NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within `TIFFReadDirectory()` in `tif_dirread.c` in libtiff versions …
CVE-2022-40090
Loop with Unreachable Exit Condition ('Infinite Loop') An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to …
CVE-2022-0908
NULL Pointer Dereference Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff …
CVE-2022-1354
Out-of-bounds Write A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker …
CVE-2022-1623
Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via …
CVE-2022-1622
Out-of-bounds Read LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via …