CVE-2022-1355
libtiff: stack-buffer-overflow in tiffcp.c in main()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 12, 2022
Updated · March 21, 2026
Description
A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.6CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-787 · Out-of-bounds Write