CVE-2022-2868CWE-20

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to…

published August 17, 2022

CVSS
—
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-08-17T00:00Z
EPSS history
Timeline
  • 17 AUG 00:00Z
    libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to…
    cvelistv5