Denial of Service Vulnerability in libtiff Affecting Multiple Platforms

CVE-2022-0908

What is CVE-2022-0908?

A vulnerability exists in libtiff that allows attackers to exploit a null source pointer passed to the memcpy() function in the TIFFFetchNormalTag() method within tif_dirread.c. By crafting a malicious TIFF file and triggering this vulnerability, an attacker can induce a denial of service condition, effectively disrupting user access to services and impacting application functionality.

References