CVEvulnerability
CVE-2022-3970
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-11-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-189
Description
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.
Affected configurations
• libtiff libtiff (< 4.5.0)
• netapp active iq unified manager
• debian debian linux 10.0
• apple safari (< 16.5.1)
• apple ipados (< 16.6)
• apple iphone os (< 16.6)
• apple macos (< 13.5)
Related
Weakness · not in database (1)
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137 Exploit, Issue Tracking, Third Party Advisory
- https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be Patch
- https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html Mailing List, Third Party Advisory
- https://oss-fuzz.com/download?testcase_id=5738253143900160 Product
- https://security.netapp.com/advisory/ntap-20221215-0009/ Third Party Advisory
- https://support.apple.com/kb/HT213841 Release Notes, Third Party Advisory
- https://support.apple.com/kb/HT213843 Release Notes, Third Party Advisory
- https://vuldb.com/?id.213549 Third Party Advisory, VDB Entry
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137 Exploit, Issue Tracking, Third Party Advisory
- https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be Patch
- https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html Mailing List, Third Party Advisory
- https://oss-fuzz.com/download?testcase_id=5738253143900160 Product
- https://security.netapp.com/advisory/ntap-20221215-0009/ Third Party Advisory
- https://support.apple.com/kb/HT213841 Release Notes, Third Party Advisory
- https://support.apple.com/kb/HT213843 Release Notes, Third Party Advisory
- https://vuldb.com/?id.213549 Third Party Advisory, VDB Entry