NetSight
IP …
medium5.5

CVE-2022-1622

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file.

Impact

LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

Affected products

VendorProductAffected versions
LibtiffLibtiff
Version 4.3.0
FedoraprojectFedora
Versions 35, 36
NetappOntap Select Deploy Administration Utility
All versions
AppleIphone Os
before 16.0
AppleMacos
from 11.0 before 11.7
from 12.0 before 12.6
AppleTvos
before 16.0
AppleWatchos
before 9.0

Weakness classification

CWE-125

References