REDHAT-BUG-1716295: Low severity evince vulnerability
The tiffdocumentrender() and tiffdocumentgetthumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.
Reference: https://gitlab.gnome.org/GNOME/evince/issues/1129
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1716295?
The vulnerability REDHAT-BUG-1716295 is classified as a moderate severity issue due to potential uninitialized memory use.
How do I fix REDHAT-BUG-1716295?
To fix REDHAT-BUG-1716295, upgrade GNOME Evince to version 3.32.1 or later, which addresses the error handling issue.
What issues does REDHAT-BUG-1716295 cause?
REDHAT-BUG-1716295 can lead to application crashes or unexpected behavior when processing certain TIFF image files.
Which versions of GNOME Evince are affected by REDHAT-BUG-1716295?
Versions of GNOME Evince up to and including 3.32.0 are affected by REDHAT-BUG-1716295.
Who reported the vulnerability REDHAT-BUG-1716295?
The vulnerability REDHAT-BUG-1716295 was reported in the GNOME Bugzilla system.