Untriaged
Libtiff: out-of-memory in tiffopen via a craft file
An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.
Affected products
iv
tkimg
libtiff
mingw-libtiff
compat-libtiff3
Package maintainers
-
@l0b0 Victor Engmark <victor@engmark.name>
-
@willcohen Will Cohen
-
@autra Augustin Trancart <augustin.trancart@gmail.com>
-
@nh2 Niklas Hambüchen <mail@nh2.me>
-
@imincik Ivan Mincik <ivan.mincik@gmail.com>
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@nialov Nikolas Ovaskainen <nikolasovaskainen@gmail.com>