CVE-2022-2869CWE-191

libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine

published August 17, 2022

CVSS
—
EPSS
0%
Percentile
23.8
In the wild
Unconfirmed
What it is

libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00320 · 23.8th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2022-08-17T00:00Z
EPSS history
Timeline
  • 17 AUG 00:00Z
    libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine
    cvelistv5