CVE-2022-0908

Un puntero fuente Null pasado como argumento a la función memcpy() dentro de la función TIFFFetchNormalTag () en el archivo tif_dirread.c en libtiff versiones hasta 4.3.0, podría conllevar a una Denegación de Servicio por medio de un archivo TIFF diseñado

A flaw was found in LibTIFF where a NULL source pointer passed as an argument to the memcpy() function within the TIFFFetchNormalTag() in tif_dirread.c. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service.

An update that fixes 8 vulnerabilities is now available. This update for tiff fixes the following issues. Fixed null source pointer passed as an argument to memcpy within TIFFFetchStripThing in tif_dirread.c. Fixed null source pointer passed as an argument to memcpy within TIFFReadDirectory in tif_dirread.c. Fixed assertion failure in TIFFReadAndRealloc. Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file. Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file. Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag. Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file. Fixed heap buffer overflow in extractImageSection.