Libtiff: null pointer dereference in tif_dirinfo.c

CVE-2024-7006

Summary

A null pointer dereference flaw has been identified in the Libtiff library, particularly in the tif_dirinfo.c component. This vulnerability could be exploited by an attacker to manipulate memory allocation processes, resulting in application crashes. The attack exploits conditions such as restricting heap space or injecting faults, which triggers segmentation faults. As a result, affected applications may experience unexpected terminations, leading to service disruptions. Organizations using Libtiff within their applications should implement appropriate mitigations to protect against this vulnerability.

References