CVE-2022-2521 | BDVDB-2026-183549 Detail

libtiff

Description#

It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-763

References#

https://gitlab.com/libtiff/libtiff/-/issues/422
https://gitlab.com/libtiff/libtiff/-/merge_requests/378
https://www.debian.org/security/2023/dsa-5333

Exploit#

No public exploit known

History#

Version 12022-08-31Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.