CVE-2022-1622
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
CVE-2022-1622- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
EUVDEUVD-2022-24911
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
EUVD-2022-24911- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8xfg-6grw-wvxc
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
GHSA-8xfg-6grw-wvxc- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
CVE-2022-1622- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVAZL-9733
CVE-2022-1622 affecting package libtiff for versions less than 4.4.0-1
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
AZL-9733- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2022-1622
CVE-2022-1622 does not affect BellSoft software
- Record
BELL-CVE-2022-1622- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSV
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
CVE-2022-1622- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-1622
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
DEBIAN-CVE-2022-1622- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVJLSEC-2025-270
LibTIFF master branch has an out-of-bounds read in LZWDecode in `libtiff/tif_lzw.c:619`, allowing...
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
- Record
JLSEC-2025-270- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
OSVOESA-2022-1728
libtiff security update
This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.
Security Fix(es):
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.(CVE-2022-1623)
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.(CVE-2022-1622)
- Record
OESA-2022-1728- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2022-0240 No score
Updated libtiff packages fix security vulnerability
Heap-buffer-overflow in TIFFReadRawDataStriped() in tiffinfo.c. (CVE-2022-1354) Stack-buffer-overflow in tiffcp.c in main(). (CVE-2022-1355) Out-of-bounds read in LZWDecode. (CVE-2022-1622, CVE-2022-1623)
- Record
MGASA-2022-0240- Updated
- 2026-11-02
OSVSUSE-SU-2023:4736-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).
- Record
SUSE-SU-2023:4736-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4869-1 No score
Security update for tiff
This update for tiff fixes the following issues:
- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).
- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).
- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).
- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).
- Record
SUSE-SU-2023:4869-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libtiffAzure Linux:2 |
before 4.4.0-1 | 4.4.0-1 |
tiffDebian:12 |
before 4.4.0~rc1-1 | 4.4.0~rc1-1 |
tiffDebian:13 |
before 4.4.0~rc1-1 | 4.4.0~rc1-1 |
tiffDebian:14 |
before 4.4.0~rc1-1 | 4.4.0~rc1-1 |
tiffDebian:11 From an advisory covering 24 CVEs |
before 4.2.0-1+deb11u3, plus listed versions 4.2.0-14.2.0-1+deb11u14.2.0-1+deb11u2 |
4.2.0-1+deb11u3 |
Libtiff_jllJulia |
4.3.0+0 up to 4.4.0+0 | 4.4.0+0 |
libtiffMageia:8 From an advisory covering 4 CVEs |
before 4.2.0-1.5.mga8 | 4.2.0-1.5.mga8 |
libtiffopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.3.0-1.oe1 | 4.3.0-1.oe1 |
libtiffopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 4.3.0-1.oe1 | 4.3.0-1.oe1 |
libtiffopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 4.3.0-15.oe2203 | 4.3.0-15.oe2203 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tiffSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 5 CVEs |
before 4.0.9-44.74.1 | 4.0.9-44.74.1 |
tiffSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 5 CVEs |
before 4.0.9-44.74.1 | 4.0.9-44.74.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 5 CVEs |
before 4.0.9-44.74.1 | 4.0.9-44.74.1 |
tiffSUSE:Linux Enterprise Micro 5.3 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Micro 5.4 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Micro 5.5 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Module for Package Hub 15 SP5 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Linux Enterprise Micro 5.2 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffSUSE:Enterprise Storage 7.1 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffopenSUSE:Leap Micro 5.3 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffopenSUSE:Leap Micro 5.4 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffopenSUSE:Leap 15.4 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
tiffopenSUSE:Leap 15.5 From an advisory covering 5 CVEs |
before 4.0.9-150000.45.35.1 | 4.0.9-150000.45.35.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1622 is a medium vulnerability (CVSS 5.5) in Libtiff, published May 11, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.73%, the 77th percentile. Fixed in libtiff 4.4.0-1.
References
gitlab.com/libtiff/libtiff/-/issues/410
security.netapp.com/advisory/ntap-20220616-0005
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK
Show 33 moreShow less
support.apple.com/kb/HT213443
seclists.org/fulldisclosure/2022/Oct/41
nvd.nist.gov/vuln/detail/CVE-2022-1622
github.com/advisories/GHSA-8xfg-6grw-wvxc
docs.bell-sw.com/security/cves/CVE-2022-1622
security-tracker.debian.org/tracker/CVE-2022-1622
advisories.mageia.org/MGASA-2022-0240.html
bugs.mageia.org/show_bug.cgi?id=30571
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1728
suse.com/support/update/announcement/2023/suse-su-20234736-1
bugzilla.suse.com/1199483