Heap-Based Buffer Overflow in LibTIFF 4.0.9 Affects Multiple Platforms
CVE-2018-8905

8.8HIGH

Key Information:

Vendor: Libtiff
Status: Libtiff
Vendor: CVE Published:; 22 March 2018

What is CVE-2018-8905?

A heap-based buffer overflow vulnerability exists in LibTIFF version 4.0.9 within the LZWDecodeCompat function, triggered by processing a specially crafted TIFF file. This can lead to potential memory corruption and unauthorized access to sensitive data. Users using affected versions should exercise caution and consider immediate updates to safeguard against possible exploits.