{"id":"CVE-2022-0907","aliases":["ALPINE-CVE-2022-0907","AZL-9020","BELL-CVE-2022-0907","DEBIAN-CVE-2022-0907","DSA-5108-1","EUVD-2022-15937","GHSA-6q3c-x5wm-6w9c","JLSEC-2025-264","MGASA-2022-0128","OESA-2022-1607","UBUNTU-CVE-2022-0907","USN-5523-1","USN-5523-2","openSUSE-SU-2024:12057-1"],"status":"published","title":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0127,"percentile":0.70197,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-252","CWE-476"],"published":"2022-03-11T00:00:00Z","modified":"2026-11-03T08:02:07Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"tiff","fixed_in":["4.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tiff","fixed_in":["4.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tiff","fixed_in":["4.3.0-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.3.0-2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tiff","fixed_in":["4.3.0-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.3.0-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.3.0-6"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.4.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libtiff","fixed_in":["4.2.0-1.4.mga8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2~deb10u4"}]}],"versions":["4.0.10+git190814-1","4.0.10+git190818-1","4.0.10+git190903-1","4.0.10+git191003-1","4.0.10-4","4.1.0+git191117-1","4.1.0+git191117-2~deb10u1","4.1.0+git191117-2~deb10u2","4.1.0+git191117-2~deb10u3","4.1.0-1"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u1"}]}],"versions":["4.2.0-1"],"bundled":9},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"4.3.0+0"},{"fixed":"4.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1.4.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-10.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-10.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-10.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-12.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm2"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm2"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.6"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.4"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm2"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm2"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.6"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.4"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-2.1"}]}],"bundled":9}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libtiff","product":"libtiff"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"}],"references":[{"url":"https://gitlab.com/libtiff/libtiff/-/issues/392","tags":["x_transferred","Exploit","Patch","Third Party Advisory","report","web"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/314","tags":["x_transferred","Third Party Advisory","fix","web","report"]},{"url":"https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0907.json","tags":["x_transferred","Third Party Advisory","web","report"]},{"url":"https://www.debian.org/security/2022/dsa-5108","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20220506-0002/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202210-10","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0907","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNT2GFNRLOMKJ5KXM6JIHKBNBFDVZPD3/"},{"url":"https://github.com/advisories/GHSA-6q3c-x5wm-6w9c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0907","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-0907","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0907.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0907","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0128.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30228","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ZQ4E654ZYUUUQNBKYQFXNK2CV3CPWTM2/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0865","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0924","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0907","tags":["report"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/40b00cfb32256d377608b4d4cd30fac338d0a0bc","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5523-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5523-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0907","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19131","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0908","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0909","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0924","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-22844","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0865","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1056","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T00:00:00Z","modified":"2024-08-02T23:47:42.626Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-15937","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T00:00:00Z","modified":"2024-08-02T23:47:42Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:26:03.022972Z"}],"ghsa":[{"id":"GHSA-6q3c-x5wm-6w9c","title":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-12T00:00:31Z","modified":"2023-01-30T05:00:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:46:12.604648Z"}],"nvd":[{"id":"CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T18:15:26.217Z","modified":"2026-06-17T04:21:27.97Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-252"],"updated_at":"2026-11-02T14:07:13.7085Z"}],"osv":[{"id":"ALPINE-CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T18:15:26.217Z","modified":"2026-11-03T07:18:33.016268489Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9020","title":"CVE-2022-0907 affecting package libtiff for versions less than 4.3.0-2","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T18:15:26Z","modified":"2026-04-21T04:34:57.90294Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BELL-CVE-2022-0907","title":"CVE-2022-0907 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:17.929192Z","modified":"2026-09-06T07:15:12.967343257Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T00:00:00Z","modified":"2026-10-28T02:31:08.535444481Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T18:15:26.217Z","modified":"2026-11-03T08:02:07.546327625Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"JLSEC-2025-264","title":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to...","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2025-11-25T22:18:43.603Z","modified":"2026-07-23T22:30:26.347639268Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1607","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\n\r\n\r\nSecurity Fix(es):\r\n\r\nNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.(CVE-2022-0908)\r\n\r\nUnchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.(CVE-2022-0907)\r\n\r\nReachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 5e180045.(CVE-2022-0865)\r\n\r\nDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.(CVE-2022-0909)\r\n\r\nOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.(CVE-2022-0924)","status":"published","published":"2022-04-08T11:04:53Z","modified":"2026-08-18T01:15:59.107237666Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-0907","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f2b656e2.","status":"published","published":"2022-03-11T18:15:00Z","modified":"2026-04-22T13:12:31.663926Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"DSA-5108-1","title":"tiff - security update","status":"published","published":"2022-03-24T00:00:00Z","modified":"2026-03-09T02:10:26.472124Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0128","title":"Updated libtiff packages fix security vulnerability","description":"Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff\n4.3.0 allows attackers to cause a denial-of-service via a crafted tiff\nfile. (CVE-2022-0907)\n","status":"published","published":"2022-04-02T22:22:09Z","modified":"2026-04-16T04:43:54.683679867Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12057-1","title":"libtiff-devel-32bit-4.3.0-1.6 on GA media","description":"These are all security issues fixed in the libtiff-devel-32bit-4.3.0-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:41.978804Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-5523-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF was not properly performing checks to\nguarantee that allocated memory space existed, which could lead to a\nNULL pointer dereference via a specially crafted file. An attacker\ncould possibly use this issue to cause a denial of service.\n(CVE-2022-0907, CVE-2022-0908)\n\nIt was discovered that LibTIFF was not properly performing checks to\navoid division calculations where the denominator value was zero,\nwhich could lead to an undefined behavior situation via a specially\ncrafted file. An attacker could possibly use this issue to cause a\ndenial of service. (CVE-2022-0909)\n\nIt was discovered that LibTIFF was not properly performing bounds\nchecks, which could lead to an out-of-bounds read via a specially\ncrafted file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information. (CVE-2022-0924)\n\nIt was discovered that LibTIFF was not properly performing the\ncalculation of data that would eventually be used as a reference for\nbounds checking operations, which could lead to an out-of-bounds\nread via a specially crafted file. An attacker could possibly use\nthis issue to cause a denial of service or to expose sensitive\ninformation. (CVE-2020-19131)\n\nIt was discovered that LibTIFF was not properly terminating a\nfunction execution when processing incorrect data, which could lead\nto an out-of-bounds read via a specially crafted file. An attacker\ncould possibly use this issue to cause a denial of service or to\nexpose sensitive information. (CVE-2020-19144)\n\nIt was discovered that LibTIFF was not properly performing checks\nwhen setting the value for data later used as reference during memory\naccess, which could lead to an out-of-bounds read via a specially\ncrafted file. An attacker could possibly use this issue to cause a\ndenial of service or to expose sensitive information.\n(CVE-2022-22844)\n","status":"published","published":"2022-07-19T11:05:26Z","modified":"2026-06-29T13:49:40.029827657Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5523-2","title":"tiff vulnerabilities","description":"USN-5523-1 fixed several vulnerabilities in LibTIFF. This update\nprovides the fixes for CVE-2022-0907, CVE-2022-0908, CVE-2022-0909,\nCVE-2022-0924 and CVE-2022-22844 for Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS.\n\nOriginal advisory details:\n\n It was discovered that LibTIFF was not properly perf   orming checks to\n guarantee that allocated memory space existed, which could lead to a\n NULL pointer dereference via a specially crafted file. An attacker\n could possibly use this issue to cause a denial of service.\n (CVE-2022-0907, CVE-2022-0908)\n \n It was discovered that LibTIFF was not properly performing checks to\n avoid division calculations where the denominator value was zero,\n which could lead to an undefined behavior situation via a specially\n crafted file. An attacker could possibly use this issue to cause a\n denial of service. (CVE-2022-0909)\n \n It was discovered that LibTIFF was not properly performing bounds\n checks, which could lead to an out-of-bounds read via a specially\n crafted file. An attacker could possibly use this issue to cause a\n denial of service or to expose sensitive information. (CVE-2022-0924)\n \n It was discovered that LibTIFF was not properly performing the\n calculation of data that would eventually be used as a reference for\n bounds checking operations, which could lead to an out-of-bounds\n read via a specially crafted file. An attacker could possibly use\n this issue to cause a denial of service or to expose sensitive\n information. (CVE-2020-19131)\n \n It was discovered that LibTIFF was not properly terminating a\n function execution when processing incorrect data, which could lead\n to an out-of-bounds read via a specially crafted file. An attacker\n could possibly use this issue to cause a denial of service or to\n expose sensitive information. (CVE-2020-19144)\n \n It was discovered that LibTIFF was not properly performing checks\n when setting the value for data later used as reference during memory\n access, which could lead to an out-of-bounds read via a specially\n crafted file. An attacker could possibly use this issue to cause a\n denial of service or to expose sensitive information.\n (CVE-2022-22844)\n","status":"published","published":"2022-09-12T07:49:59Z","modified":"2026-04-22T10:26:21.220566Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}