CVE-2022-2520

Medium

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash…

redhat·CWE-131·Published 2022-08-31

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

168 chars

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

NVDen

168 chars

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

NVDes

234 chars

Se ha encontrado un fallo en libtiff versión 4.4.0rc1. Se presenta un fallo de aserción de sysmalloc en la función rotateImage() en el archivo tiffcrop.c:8621 que puede causar la caída del programa cuando es leída una entrada diseñada

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H