CVE-2022-2867CWE-191

libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write

published August 17, 2022

CVSS
—
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2022-08-17T00:00Z
EPSS history
Timeline
  • 17 AUG 00:00Z
    libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write
    cvelistv5