Every CVE Search/ Get API key

CVE-2022-48281

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer...

5.5 MediumFix available

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.46%Down 0.4 points since Jan 23, 2023
90%50%10%1%

What each source reports

NVD Score used 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2022-50983 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
EUVD-2022-50983
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-4qr3-39h9-qwp4 8.8

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer...

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
GHSA-4qr3-39h9-qwp4
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2022-48281 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
ALPINE-CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVAZL-13151 5.5

CVE-2022-48281 affecting package libtiff for versions less than 4.4.0-7

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
AZL-13151
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVBELL-CVE-2022-48281 5.5

CVE-2022-48281 does not affect BellSoft software

Record
BELL-CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48281 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
DEBIAN-CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVJLSEC-2025-289 5.5

processCropSelections in `tools/tiffcrop.c` in LibTIFF through 4.5.0 has a heap-based buffer...

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
JLSEC-2025-289
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1047 7.5

libtiff security update

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.(CVE-2022-48281)

Record
OESA-2023-1047
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:3711 6.1

Red Hat Security Advisory: libtiff security update

Record
RHSA-2023:3711
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:3827 5.5

Red Hat Security Advisory: libtiff security update

Record
RHSA-2023:3827
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:3711 6.1

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

  • libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)

  • libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)

  • libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)

  • libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)

  • libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)

  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)

  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)

  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)

  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3711
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:3827 5.5

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:3827
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48281 5.5

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.

Record
UBUNTU-CVE-2022-48281
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:3711 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)
  • libtiff: out-of-bounds read in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0795)
  • libtiff: out-of-bounds read in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0796)
  • libtiff: out-of-bounds read in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0797)
  • libtiff: out-of-bounds read in extractContigSamplesShifted8bits() in tools/tiffcrop.c (CVE-2023-0798)
  • libtiff: use-after-free in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0799)
  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0800)
  • libtiff: out-of-bounds write in _TIFFmemcpy() in libtiff/tif_unix.c when called by functions in tools/tiffcrop.c (CVE-2023-0801)
  • libtiff: out-of-bounds write in extractContigSamplesShifted32bits() in tools/tiffcrop.c (CVE-2023-0802)
  • libtiff: out-of-bounds write in extractContigSamplesShifted16bits() in tools/tiffcrop.c (CVE-2023-0803)
  • libtiff: out-of-bounds write in extractContigSamplesShifted24bits() in tools/tiffcrop.c (CVE-2023-0804)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3711
Updated
2026-11-02
OSVALSA-2023:3827 No score

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: heap-based buffer overflow in processCropSelections() in tools/tiffcrop.c (CVE-2022-48281)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:3827
Updated
2026-11-02
OSVMGASA-2023-0038 No score

Updated libtiff packages fix security vulnerability

processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image. (CVE-2022-48281)

Record
MGASA-2023-0038
Updated
2026-11-02
OSVopenSUSE-SU-2024:12643-1 No score

libtiff-devel-32bit-4.5.0-2.1 on GA media

These are all security issues fixed in the libtiff-devel-32bit-4.5.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12643-1
Updated
2026-11-02
OSVSUSE-SU-2023:0199-1 No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image (bsc#1207413).
Record
SUSE-SU-2023:0199-1
Updated
2026-11-02
OSVSUSE-SU-2023:0342-1 No score

Security update for tiff

This update for tiff fixes the following issues:

  • CVE-2022-48281: Fixed a buffer overflow that could be triggered via a crafted image (bsc#1207413).
Record
SUSE-SU-2023:0342-1
Updated
2026-11-02
OSVUSN-5841-1 No score

tiff vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issue was only fixed in Ubuntu 14.04 ESM. (CVE-2019-14973, CVE-2019-17546, CVE-2020-35523, CVE-2020-35524, CVE-2022-3970)

It was discovered that LibTIFF was incorrectly acessing a data structure when processing data with the tiffcrop tool, which could lead to a heap buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2022-48281)

Record
USN-5841-1
Updated
2026-11-02
OSVUSN-6290-1 No score

tiff vulnerabilities

It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-48281)

It was discovered that LibTIFF incorrectly handled certain image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 23.04. (CVE-2023-2731)

It was discovered that LibTIFF incorrectly handled certain image files with the tiffcp utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcp to crash, resulting in a denial of service. (CVE-2023-2908)

It was discovered that LibTIFF incorrectly handled certain file paths. If a user were tricked into specifying certain output paths, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-3316)

It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. (CVE-2023-3618)

It was discovered that LibTIFF could be made to write out of bounds when processing certain malformed image files. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-25433, CVE-2023-26966)

It was discovered that LibTIFF did not properly managed memory when processing certain malformed image files with the tiffcrop utility. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause tiffcrop to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2023-26965)

It was discovered that LibTIFF contained an arithmetic overflow. If a user were tricked into opening a specially crafted image file, an attacker could possibly use this issue to cause a denial of service. (CVE-2023-38288, CVE-2023-38289)

Record
USN-6290-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
tiff
Alpine:v3.17
 before 4.4.0-r2
4.4.0-r2
tiff
Alpine:v3.18
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.19
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.20
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.21
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.22
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.23
 before 4.5.0-r3
4.5.0-r3
tiff
Alpine:v3.24
 before 4.5.0-r3
4.5.0-r3
libtiff
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
libtiff-devel
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
Show 76 moreShow less
Affected packages
PackageAffectedFixed
libtiff-tools
AlmaLinux:9
 before 4.4.0-8.el9_2
4.4.0-8.el9_2
libtiff
AlmaLinux:8
 before 4.0.9-28.el8_8
4.0.9-28.el8_8
libtiff-devel
AlmaLinux:8
 before 4.0.9-28.el8_8
4.0.9-28.el8_8
libtiff-tools
AlmaLinux:8
 before 4.0.9-28.el8_8
4.0.9-28.el8_8
libtiff
Azure Linux:2
 before 4.4.0-7
4.4.0-7
tiff
Debian:12
 before 4.5.0-4
4.5.0-4
tiff
Debian:13
 before 4.5.0-4
4.5.0-4
tiff
Debian:14
 before 4.5.0-4
4.5.0-4
tiff
Debian:10
 before 4.1.0+git191117-2~deb10u6, plus listed versions
4.0.10+git190814-14.0.10+git190818-14.0.10+git190903-14.0.10+git191003-14.0.10-4
Show 7 moreShow less
4.1.0+git191117-14.1.0+git191117-2~deb10u14.1.0+git191117-2~deb10u24.1.0+git191117-2~deb10u34.1.0+git191117-2~deb10u44.1.0+git191117-2~deb10u54.1.0-1
4.1.0+git191117-2~deb10u6
tiff
Debian:11
 before 4.2.0-1+deb11u3, plus listed versions
4.2.0-14.2.0-1+deb11u14.2.0-1+deb11u2
4.2.0-1+deb11u3
Libtiff_jll
Julia
 before 4.5.1+0
4.5.1+0
libtiff
Mageia:8
 before 4.2.0-1.13.mga8
4.2.0-1.13.mga8
libtiff
openEuler:20.03-LTS-SP1
 before 4.3.0-8.oe1
4.3.0-8.oe1
libtiff
openEuler:20.03-LTS-SP3
 before 4.3.0-8.oe1
4.3.0-8.oe1
libtiff
openEuler:22.03-LTS
 before 4.3.0-24.oe2203sp1
4.3.0-24.oe2203sp1
libtiff
openEuler:22.03-LTS-SP1
 before 4.3.0-24.oe2203sp1
4.3.0-24.oe2203sp1
libtiff
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-devel
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-devel
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-tools
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff-tools-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
libtiff
Rocky Linux:9
 before 0:4.4.0-8.el9_2
0:4.4.0-8.el9_2
libtiff
Rocky Linux:8
 before 0:4.0.9-28.el8_8
0:4.0.9-28.el8_8
tiff
SUSE:OpenStack Cloud 9
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:OpenStack Cloud Crowbar 9
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Server 12 SP5
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 4.0.9-44.65.1
4.0.9-44.65.1
tiff
SUSE:Linux Enterprise Micro 5.3
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Real Time 15 SP3
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Manager Proxy 4.2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Manager Retail Branch Server 4.2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Manager Server 4.2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Linux Enterprise Micro 5.2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Enterprise Storage 6
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Enterprise Storage 7
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
SUSE:Enterprise Storage 7.1
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
openSUSE:Leap Micro 5.2
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
openSUSE:Leap Micro 5.3
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
openSUSE:Leap 15.4
 before 4.0.9-150000.45.25.1
4.0.9-150000.45.25.1
tiff
Ubuntu:Pro:14.04:LTS
 before 4.0.3-7ubuntu0.11+esm6, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 15 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm5
4.0.3-7ubuntu0.11+esm6
tiff
Ubuntu:Pro:16.04:LTS
 before 4.0.6-1ubuntu0.8+esm9, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 13 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm8
4.0.6-1ubuntu0.8+esm9
tiff
Ubuntu:Pro:18.04:LTS
 before 4.0.9-5ubuntu0.10+esm2, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 14 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm1
4.0.9-5ubuntu0.10+esm2
tiff
Ubuntu:20.04:LTS
 before 4.1.0+git191117-2ubuntu0.20.04.9, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 7 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.8
4.1.0+git191117-2ubuntu0.20.04.9
tiff
Ubuntu:22.04:LTS
 before 4.3.0-6ubuntu0.5, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4
Show 6 moreShow less
4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.4
4.3.0-6ubuntu0.5
tiff
Ubuntu:Pro:14.04:LTS
 before 4.0.3-7ubuntu0.11+esm9, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 18 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm8
4.0.3-7ubuntu0.11+esm9
tiff
Ubuntu:Pro:16.04:LTS
 before 4.0.6-1ubuntu0.8+esm12, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 16 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm11
4.0.6-1ubuntu0.8+esm12
tiff
openSUSE:Tumbleweed
 before 4.5.0-2.1
4.5.0-2.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-48281 is a medium vulnerability (CVSS 5.5) in Libtiff, published January 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 39th percentile. Fixed in tiff 4.4.0-r2.

References

Show 94 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open