PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2019-7663

CVE-2019-7663

libtiff: integer overflow in libtiff/tif_dirwrite.c resulting in an invalid pointer dereference

Loading…

Severity

Unknown

Red Hat Product Security

0

CVSS 3.1

Review impact separately from score.

Published · December 18, 2018

Updated · June 27, 2026

Description

An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.

Statement

This report appears to be a duplicate of CVE-2018-17000. While the crash manifests differently, both vulnerabilities are fixed by the same upstream commit.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 0
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N

CWE-190 · Integer Overflow or Wraparound