tocsin

Alpine/tiff: high 8.8

In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated by tiff2ps.

Action: Upgrade tiff to 4.0.9-r5 or later.

Affected

introducedfixedlast affected
04.0.9-r5-

Fixed versions

4.0.9-r5

Sources

published · modified · JSON