CVE-2024-7006CWE-476

Libtiff: null pointer dereference in tif_dirinfo.c

High · published August 8, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01516 · 74.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-08-08T20:49Z
EPSS history
Timeline
  • 08 AUG 20:49Z
    Libtiff: null pointer dereference in tif_dirinfo.c
    cvelistv5