tocsin

Alpine/tiff: medium 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Action: Upgrade tiff to 4.5.0-r3 or later.

Affected

introducedfixedlast affected
04.5.0-r3-

Fixed versions

4.5.0-r3

Sources

published · modified · JSON