CVE-2018-5360 | BDVDB-2026-95252 Detail

Description#

LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceforge.net/p/graphicsmagick/bugs/540/
https://gitlab.com/libtiff/libtiff/commit/739dcd28a061738b317c1e9f91029d9cbc157159
http://bugzilla.maptools.org/show_bug.cgi?id=2500

Exploit#

No public exploit known

History#

Version 12018-01-14Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.