CVE-2022-2867
CVE-2022-2867
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
17 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.
Affected products
n/a · libtiffWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →