Heap Buffer Overflow in libtiff Library Affects Multiple Versions

CVE-2022-0891

What is CVE-2022-0891?

A vulnerability exists within the libtiff library that may allow attackers to exploit a heap buffer overflow through the 'ExtractImageSection' function in 'tiffcrop.c'. By crafting a malformed TIFF image file, an attacker can trigger unsafe or out-of-bounds memory access, which could lead to various consequences including application crashes and potential information leakage, depending on the context in which the vulnerability is exploited.

References