CVE - CVE-2022-1622

CVE-ID
CVE-2022-1622	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 URL:http://seclists.org/fulldisclosure/2022/Oct/28 MISC:20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 URL:http://seclists.org/fulldisclosure/2022/Oct/39 MISC:20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 URL:http://seclists.org/fulldisclosure/2022/Oct/41 MISC:FEDORA-2022-e9fe21d102 URL:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7IWZTB4J2N4F5OR5QY4VHDSKWKZSWN3/ MISC:FEDORA-2022-ea3ebeff3d URL:https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK/ MISC:https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1622.json URL:https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1622.json MISC:https://gitlab.com/libtiff/libtiff/-/commit/b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a URL:https://gitlab.com/libtiff/libtiff/-/commit/b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a MISC:https://gitlab.com/libtiff/libtiff/-/issues/410 URL:https://gitlab.com/libtiff/libtiff/-/issues/410 MISC:https://security.netapp.com/advisory/ntap-20220616-0005/ URL:https://security.netapp.com/advisory/ntap-20220616-0005/ MISC:https://support.apple.com/kb/HT213443 URL:https://support.apple.com/kb/HT213443 MISC:https://support.apple.com/kb/HT213444 URL:https://support.apple.com/kb/HT213444 MISC:https://support.apple.com/kb/HT213446 URL:https://support.apple.com/kb/HT213446 MISC:https://support.apple.com/kb/HT213486 URL:https://support.apple.com/kb/HT213486 MISC:https://support.apple.com/kb/HT213487 URL:https://support.apple.com/kb/HT213487 MISC:https://support.apple.com/kb/HT213488 URL:https://support.apple.com/kb/HT213488
Assigning CNA
GitLab Inc.
Date Record Created
20220509	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20220509)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.