Every CVE Search/ Get API key

CVE-2022-1056

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of...

5.5 MediumFix available

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.09%Up 0.2 points since Mar 29, 2022
90%50%10%1%

What each source reports

CVE List Score used 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
CVE-2022-1056
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2022-24402 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
EUVD-2022-24402
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-2ggh-mqg8-7mvr 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of...

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
GHSA-2ggh-mqg8-7mvr
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
CVE-2022-1056
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
OSVAZL-9187 5.5

CVE-2022-1056 affecting package libtiff for versions less than 4.3.0-2

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
AZL-9187
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
CVE-2022-1056
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2022-1056 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
DEBIAN-CVE-2022-1056
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVJLSEC-2025-269 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
JLSEC-2025-269
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVUBUNTU-CVE-2022-1056 5.5

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Record
UBUNTU-CVE-2022-1056
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12057-1 No score

libtiff-devel-32bit-4.3.0-1.6 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.3.0-1.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12057-1
Updated
2026-11-02
OSVSUSE-SU-2022:1667-1 No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
  • CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
  • CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
  • CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
  • CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
  • CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
  • CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
  • CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
Record
SUSE-SU-2022:1667-1
Updated
2026-11-02
OSVSUSE-SU-2022:1882-1 No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy() within TIFFFetchStripThing() in tif_dirread.c (bsc#1195964).
  • CVE-2022-0562: Fixed null source pointer passed as an argument to memcpy() within TIFFReadDirectory() in tif_dirread.c (bsc#1195965).
  • CVE-2022-0865: Fixed assertion failure in TIFFReadAndRealloc (bsc#1197066).
  • CVE-2022-0909: Fixed divide by zero error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197072).
  • CVE-2022-0924: Fixed out-of-bounds read error in tiffcp that could have led to a denial-of-service via a crafted tiff file (bsc#1197073).
  • CVE-2022-0908: Fixed null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() (bsc#1197074).
  • CVE-2022-1056: Fixed out-of-bounds read error in tiffcrop that could have led to a denial-of-service via a crafted tiff file (bsc#1197631).
  • CVE-2022-0891: Fixed heap buffer overflow in extractImageSection (bsc#1197068).
Record
SUSE-SU-2022:1882-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libtiff
Azure Linux:2
 before 4.3.0-2
4.3.0-2
tiff
Debian:12
 before 4.4.0~rc1-1
4.4.0~rc1-1
tiff
Debian:13
 before 4.4.0~rc1-1
4.4.0~rc1-1
tiff
Debian:14
 before 4.4.0~rc1-1
4.4.0~rc1-1
Libtiff_jll
Julia
 4.3.0+0 up to 4.4.0+0
4.4.0+0
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 4.0.9-44.48.1
4.0.9-44.48.1
tiff
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 4.0.9-44.48.1
4.0.9-44.48.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 4.0.9-44.48.1
4.0.9-44.48.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
Show 30 moreShow less
Affected packages
PackageAffectedFixed
tiff
SUSE:Linux Enterprise Module for Desktop Applications 15 SP3
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP3
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server 15 SP2-BCL
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Manager Proxy 4.1
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Manager Server 4.1
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Enterprise Storage 6
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
SUSE:Enterprise Storage 7
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
openSUSE:Leap 15.4
From an advisory covering 8 CVEs
 before 4.0.9-150000.45.8.1
4.0.9-150000.45.8.1
tiff
Ubuntu:Pro:14.04:LTS
 before 4.0.3-7ubuntu0.11+esm1, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 10 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.11
4.0.3-7ubuntu0.11+esm1
tiff
Ubuntu:Pro:16.04:LTS
 before 4.0.6-1ubuntu0.8+esm1, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 6 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.8
4.0.6-1ubuntu0.8+esm1
tiff
Ubuntu:18.04:LTS
 before 4.0.9-5ubuntu0.5, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 7 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.4
4.0.9-5ubuntu0.5
tiff
Ubuntu:20.04:LTS
 before 4.1.0+git191117-2ubuntu0.20.04.3, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.14.1.0+git191117-2ubuntu0.20.04.2
4.1.0+git191117-2ubuntu0.20.04.3
tiff
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 4.3.0-2.1
4.3.0-2.1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-1056 is a medium vulnerability (CVSS 5.5) in Libtiff, published March 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in libtiff 4.3.0-2.

References

Show 25 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open