Every CVE Search/ Get API key

CVE-2022-4645

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to...

6.8 MediumFix available

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

0.43%Down 0.5 points since Mar 4, 2023
90%50%10%1%

What each source reports

CVE List Score used 6.8

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
CVE-2022-4645
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-51971 6.8

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
EUVD-2022-51971
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6fr2-gj2w-xgr6 5.5

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to...

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
GHSA-6fr2-gj2w-xgr6
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 6.8

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
CVE-2022-4645
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2022-4645 5.5

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
ALPINE-CVE-2022-4645
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-13826 5.5

CVE-2022-4645 affecting package libtiff for versions less than 4.5.0-1

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
AZL-13826
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVAZL-43561 5.5

CVE-2022-4645 affecting package openjpeg2 2.3.1-12

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
AZL-43561
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-44667 5.5

CVE-2022-4645 affecting package openjpeg2 2.3.1-12

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
AZL-44667
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
OSVBELL-CVE-2022-4645 5.5

CVE-2022-4645 does not affect BellSoft software

Record
BELL-CVE-2022-4645
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 6.8

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
CVE-2022-4645
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVJLSEC-2025-300 5.5

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in `tools/tiffcp.c:948`, allowing attackers to...

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
JLSEC-2025-300
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2340 8.8

Red Hat Security Advisory: libtiff security update

Record
RHSA-2023:2340
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:3059 5.6

Red Hat Security Advisory: libtiff security update

Record
RHSA-2024:3059
CVSS 3.1
5.6 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-4645 5.5

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
UBUNTU-CVE-2022-4645
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
6.8 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:2340 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap Buffer overflows in tiffcrop.c (CVE-2022-3570)
  • libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix (CVE-2022-3597)
  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c (CVE-2022-3598)
  • libtiff: out-of-bounds read in writeSingleSection in tools/tiffcrop.c (CVE-2022-3599)
  • libtiff: out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c (CVE-2022-3626)
  • libtiff: out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c (CVE-2022-3627)
  • libtiff: integer overflow in function TIFFReadRGBATileExt of the file (CVE-2022-3970)
  • libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)
  • libtiff: heap buffer overflow issues related to TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2023-30774)
  • libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c (CVE-2023-30775)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2340
Updated
2026-11-02
OSVALSA-2024:3059 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2024:3059
Updated
2026-11-02
OSVDEBIAN-CVE-2022-4645 No score

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.

Record
DEBIAN-CVE-2022-4645
Updated
2026-11-03
OSVMGASA-2023-0113 No score

Updated libtiff packages fix security vulnerability

LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. (CVE-2022-4645)

Record
MGASA-2023-0113
Updated
2026-11-02
OSVRLSA-2024:3059 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c (CVE-2022-4645)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

Record
RLSA-2024:3059
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Alpine:v3.17
 before 4.4.0-r2
4.4.0-r2
libtiff
AlmaLinux:9
From an advisory covering 10 CVEs
 before 4.4.0-7.el9
4.4.0-7.el9
libtiff-devel
AlmaLinux:9
From an advisory covering 10 CVEs
 before 4.4.0-7.el9
4.4.0-7.el9
libtiff-tools
AlmaLinux:9
From an advisory covering 10 CVEs
 before 4.4.0-7.el9
4.4.0-7.el9
libtiff
AlmaLinux:8
 before 4.0.9-31.el8
4.0.9-31.el8
libtiff-devel
AlmaLinux:8
 before 4.0.9-31.el8
4.0.9-31.el8
libtiff-tools
AlmaLinux:8
 before 4.0.9-31.el8
4.0.9-31.el8
libtiff
Azure Linux:2
 before 4.5.0-1
4.5.0-1
openjpeg2
Azure Linux:2
 through 2.3.1-12 None known
openjpeg2
Azure Linux:3
 through 2.3.1-12 None known
Show 30 moreShow less
Affected packages
PackageAffectedFixed
tiff
Debian:12
 before 4.4.0-5
4.4.0-5
tiff
Debian:13
 before 4.4.0-5
4.4.0-5
tiff
Debian:14
 before 4.4.0-5
4.4.0-5
tiff
Debian:11
From an advisory covering 24 CVEs
 before 4.2.0-1+deb11u3, plus listed versions
4.2.0-14.2.0-1+deb11u14.2.0-1+deb11u2
4.2.0-1+deb11u3
Libtiff_jll
Julia
 before 4.5.1+0
4.5.1+0
libtiff
Mageia:8
 before 4.2.0-1.15.mga8
4.2.0-1.15.mga8
libtiff
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-tools
Red Hat:enterprise_linux:9::crb
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 11 CVEs
 before 0:4.4.0-7.el9
0:4.4.0-7.el9
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
libtiff
Rocky Linux:8
 before 0:4.0.9-31.el8
0:4.0.9-31.el8
tiff
Ubuntu:Pro:14.04:LTS
 before 4.0.3-7ubuntu0.11+esm5, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 14 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm4
4.0.3-7ubuntu0.11+esm5
tiff
Ubuntu:Pro:16.04:LTS
 before 4.0.6-1ubuntu0.8+esm7, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 11 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm6
4.0.6-1ubuntu0.8+esm7
tiff
Ubuntu:18.04:LTS
 before 4.0.9-5ubuntu0.8, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 10 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.7
4.0.9-5ubuntu0.8
tiff
Ubuntu:20.04:LTS
 before 4.1.0+git191117-2ubuntu0.20.04.6, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 4 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.5
4.1.0+git191117-2ubuntu0.20.04.6
tiff
Ubuntu:22.04:LTS
 before 4.3.0-6ubuntu0.2, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-44.3.0-54.3.0-64.3.0-6ubuntu0.1
4.3.0-6ubuntu0.2

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4645 is a medium vulnerability (CVSS 6.8) in Libtiff, published January 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 36th percentile. Fixed in tiff 4.4.0-r2.

References

Show 77 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open