CVE-2016-9448

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags…

published January 27, 2017

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags TIFF_SETGET_C16ASCII or TIFF_SETGET_C32_ASCII to values that access 0-byte arrays. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9297.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04975 · 92.1th percentile
Published
2017-01-27T17:00Z
EPSS history
Timeline
  • 27 JAN 17:00Z
    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by setting the tags…
    cvelistv5