CVE-2020-35523CWE-190

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file

published March 9, 2021

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01922 · 79.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2021-03-09T19:17Z
EPSS history
Timeline
  • 09 MAR 19:17Z
    An integer overflow flaw was found in libtiff that exists in the tif_getimage.c file
    cvelistv5