REDHAT-BUG-2148918: Integer Overflow

Published Nov 28, 2022

Updated

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tifgetimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely.

References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137 https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be

Affected Software

1 affected component

LibTIFF libtiff

Event History

Nov 28, 2022

Data Sourced

via Red Hat·11:13 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What input or access would an attacker need to exploit this issue?

The issue can be initiated remotely and affects TIFFReadRGBATileExt, so exploitation requires reaching code that processes a crafted TIFF image using that function.

What is the underlying vulnerability class?

The flaw is an integer overflow in libtiff/tif_getimage.c within TIFFReadRGBATileExt. It is classified under CWE: Integer Overflow.

How can I identify affected code in a source-based deployment?

Check whether your LibTIFF source includes the upstream change identified by commit 227500897dfb07fb7d27f7aa570050e62617e3be. The provided data does not identify affected or fixed release versions.