{"id":"CVE-2022-2869","aliases":["ALPINE-CVE-2022-2869","ALSA-2023:0095","AZL-10593","BELL-CVE-2022-2869","DEBIAN-CVE-2022-2869","DLA-3278-1","DSA-5333-1","EUVD-2022-35103","GHSA-m98c-rvx4-4xmr","JLSEC-2025-278","MGASA-2022-0337","OESA-2022-1869","RHSA-2023:0095","RLSA-2023:0095","SUSE-SU-2022:3679-1","SUSE-SU-2022:3690-1","UBUNTU-CVE-2022-2869","USN-5604-1","USN-5714-1","openSUSE-SU-2024:13381-1"],"status":"published","title":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in...","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00323,"percentile":0.25508,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125","CWE-191","CWE-787"],"published":"2022-08-17T00:00:00Z","modified":"2026-11-03T08:01:12Z","exploits":[{"source":"pocgithub","id":"halahajyahia/CVE-2022-2869-detector","title":"halahajyahia/CVE-2022-2869-detector","date":"2026-09-08","url":"https://github.com/halahajyahia/CVE-2022-2869-detector"}],"fixes":[{"ecosystem":"Alpine:v3.13","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"tiff","fixed_in":["4.4.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.5.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tiff","fixed_in":["4.4.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.4.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.4.0~rc1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.4.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"tiff","fixed_in":["4.3.0-6ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0~rc1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2~deb10u5"}]}],"versions":["4.0.10+git190814-1","4.0.10+git190818-1","4.0.10+git190903-1","4.0.10+git191003-1","4.0.10-4","4.1.0+git191117-1","4.1.0+git191117-2~deb10u1","4.1.0+git191117-2~deb10u2","4.1.0+git191117-2~deb10u3","4.1.0+git191117-2~deb10u4","4.1.0-1"],"bundled":16},{"source":"osv","ecosystem":"Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u3"}]}],"versions":["4.2.0-1","4.2.0-1+deb11u1","4.2.0-1+deb11u2"],"bundled":24},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1.8.mga8"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-17.oe2203"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-26.el8_7"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.56.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm3"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm3"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.8"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.6"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.2"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm3"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm3"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm5"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm7"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.8"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.6"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.2"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-2.1"}]}],"bundled":16}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118869","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","report","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2023/dsa-5333","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2869","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m98c-rvx4-4xmr"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-2869","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0095","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2056","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2057","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2058","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2519","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2520","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2521","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2867","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2868","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2869","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2953","tags":["report"]},{"url":"https://bugzilla.redhat.com/2103222","tags":["report"]},{"url":"https://bugzilla.redhat.com/2118847","tags":["report"]},{"url":"https://bugzilla.redhat.com/2118863","tags":["report"]},{"url":"https://bugzilla.redhat.com/2118869","tags":["report"]},{"url":"https://bugzilla.redhat.com/2122789","tags":["report"]},{"url":"https://bugzilla.redhat.com/2122792","tags":["report"]},{"url":"https://bugzilla.redhat.com/2122799","tags":["report"]},{"url":"https://bugzilla.redhat.com/2134432","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0095.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-2869","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2869.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2869","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0337.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30836","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5604-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1869","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2868","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122799","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134432","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0095.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2056","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2057","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2058","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2519","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2520","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2521","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2521","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2867","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2868","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2869","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2953","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0095","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223679-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201723","tags":["report"]},{"url":"https://bugzilla.suse.com/1201971","tags":["report"]},{"url":"https://bugzilla.suse.com/1202026","tags":["report"]},{"url":"https://bugzilla.suse.com/1202466","tags":["report"]},{"url":"https://bugzilla.suse.com/1202467","tags":["report"]},{"url":"https://bugzilla.suse.com/1202468","tags":["report"]},{"url":"https://bugzilla.suse.com/1202968","tags":["report"]},{"url":"https://bugzilla.suse.com/1202971","tags":["report"]},{"url":"https://bugzilla.suse.com/1202973","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0561","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-34526","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223690-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2869","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5714-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2867","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2868","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2519","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2520","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2521","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2953","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3570","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3597","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3598","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3627","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-34526","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12944","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-22844","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T00:00:00Z","modified":"2024-08-03T00:52:59.054Z","cwes":["CWE-191"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-35103","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T00:00:00Z","modified":"2024-08-03T00:52:59Z","updated_at":"2026-11-03T03:25:57.460299Z"}],"ghsa":[{"id":"GHSA-m98c-rvx4-4xmr","title":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in...","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-18T00:00:14Z","modified":"2023-01-30T03:30:20Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:46:12.604648Z"}],"nvd":[{"id":"CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T22:15:08.807Z","modified":"2026-06-17T04:42:44.557Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-191","CWE-125","CWE-787"],"updated_at":"2026-11-02T14:07:25.242752Z"}],"osv":[{"id":"ALPINE-CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T22:15:08.807Z","modified":"2026-11-03T07:18:33.151145966Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10593","title":"CVE-2022-2869 affecting package libtiff for versions less than 4.5.0-1","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T22:15:08Z","modified":"2026-04-21T04:21:15.752604Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:01.09948Z"},{"id":"BELL-CVE-2022-2869","title":"CVE-2022-2869 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:20.712942Z","modified":"2026-09-06T07:15:20.664380097Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T22:15:08.807Z","modified":"2026-11-03T08:01:12.434347294Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"JLSEC-2025-278","title":"libtiff's tiffcrop tool has a `uint32_t` underflow which leads to out of bounds read and write in...","description":"libtiff's tiffcrop tool has a `uint32_t` underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2025-11-25T22:18:43.603Z","modified":"2026-07-23T22:30:29.064840155Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2022-1869","title":"libtiff security update","description":"\r\n\r\nSecurity Fix(es):\r\n\r\nlibtiff\u0026apos;s tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.(CVE-2022-2867)\r\n\r\nlibtiff\u0026apos;s tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.(CVE-2022-2868)\r\n\r\nlibtiff\u0026apos;s tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.(CVE-2022-2869)","status":"published","published":"2022-08-26T11:05:08Z","modified":"2026-08-18T01:17:17.103958294Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2023:0095","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T09:37:24Z","modified":"2026-07-03T10:02:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2023:0095","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)\n\n* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)\n\n* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)\n\n* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)\n\n* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)\n\n* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)\n\n* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)\n\n* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T08:25:25Z","modified":"2026-02-05T11:00:03.770876Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T22:15:00Z","modified":"2026-04-22T13:22:41.648859Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2023:0095","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)\n* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)\n* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)\n* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)\n* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)\n* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)\n* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)\n* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2026-10-29T11:01:58.05008256Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-2869","description":"libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine. An attacker who supplies a crafted file to tiffcrop could trigger this flaw, most likely by tricking a user into opening the crafted file with tiffcrop. Triggering this flaw could cause a crash or potentially further exploitation.","status":"published","published":"2022-08-17T00:00:00Z","modified":"2026-10-28T02:30:49.194607485Z","cwes":["CWE-191"],"updated_at":"2026-11-02T15:44:25.164673Z"},{"id":"DLA-3278-1","title":"tiff - security update","status":"published","published":"2023-01-20T00:00:00Z","modified":"2026-03-09T01:23:36.546725Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5333-1","title":"tiff - security update","status":"published","published":"2023-01-29T00:00:00Z","modified":"2026-03-09T02:08:42.956506Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0337","title":"Updated libtiff packages fix security vulnerability","description":"libtiff's tiffcrop utility has a uint32_t underflow that can lead to out\nof bounds read and write. An attacker who supplies a crafted file to\ntiffcrop (likely via tricking a user to run tiffcrop on it with certain\nparameters) could cause a crash or in some cases, further exploitation.\n(CVE-2022-2867)\n\nlibtiff's tiffcrop utility has a improper input validation flaw that can\nlead to out of bounds read and ultimately cause a crash if an attacker is\nable to supply a crafted file to tiffcrop. (CVE-2022-2868)\n\nlibtiff's tiffcrop tool has a uint32_t underflow which leads to out of\nbounds read and write in the extractContigSamples8bits routine. An\nattacker who supplies a crafted file to tiffcrop could trigger this flaw,\nmost likely by tricking a user into opening the crafted file with\ntiffcrop. Triggering this flaw could cause a crash or potentially further\nexploitation. (CVE-2022-2869)\n","status":"published","published":"2022-09-16T19:39:55Z","modified":"2026-04-16T04:43:12.614471115Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13381-1","title":"libtiff-devel-32bit-4.6.0-2.1 on GA media","description":"These are all security issues fixed in the libtiff-devel-32bit-4.6.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:05.880733Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2022:3679-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).\n- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).\n- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).\n- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).\n- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).\n- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).\n- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).\n","status":"published","published":"2022-10-20T13:17:33Z","modified":"2026-02-04T03:51:22.91524Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3690-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2022-2519: Fixed a double free in rotateImage() (bsc#1202968).\n- CVE-2022-2520: Fixed a assertion failure in rotateImage() (bsc#1202973).\n- CVE-2022-2521: Fixed invalid free in TIFFClose() (bsc#1202971).\n- CVE-2022-2867: Fixed out of bounds read and write in tiffcrop.c (bsc#1202466).\n- CVE-2022-2868: Fixed out of bounds read in reverseSamples16bits() (bsc#1202467).\n- CVE-2022-2869: Fixed out of bounds read and write in extractContigSamples8bits() (bsc#1202468).\n- CVE-2022-34526: Fixed stack overflow in the _TIFFVGetField function of Tiffsplit (bsc#1202026).\n","status":"published","published":"2022-10-21T13:07:36Z","modified":"2026-02-04T04:05:00.76887Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5604-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service,\nor possibly execute arbitrary code. (CVE-2022-2867, CVE-2022-2869)\n\nIt was discovered that LibTIFF incorrectly handled certain files.\nAn attacker could possibly use this issue to cause a denial of service.\n(CVE-2022-2868)\n","status":"published","published":"2022-09-08T21:12:58Z","modified":"2026-06-29T13:49:41.139763727Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-5714-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF incorrectly handled certain memory operations\nwhen using tiffcrop. An attacker could trick a user into processing a specially\ncrafted tiff image file and potentially use this issue to cause a denial of\nservice. This issue only affected Ubuntu 22.10. (CVE-2022-2519, CVE-2022-2520,\nCVE-2022-2521, CVE-2022-2953)\n\nIt was discovered that LibTIFF did not properly perform bounds checking in\ncertain operations when using tiffcrop. An attacker could trick a user into\nprocessing a specially crafted tiff image file and potentially use this issue\nto allow for information disclosure or to cause the application to crash. This\nissue only affected to Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.\n(CVE-2022-2867, CVE-2022-2868, CVE-2022-2869)\n\nIt was discovered that LibTIFF did not properly perform bounds checking in\ncertain operations when using tiffsplit. An attacker could trick a user into\nprocessing a specially crafted tiff image file and potentially use this issue\nto allow for information disclosure or to cause the application to crash. This\nissue only affected to Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS,\nUbuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-34526)\n\nChintan Shah discovered that LibTIFF incorrectly handled memory in certain\nconditions when using tiffcrop. An attacker could trick a user into processing\na specially crafted image file and potentially use this issue to allow for\ninformation disclosure or to cause the application to crash. This issue only\naffected to Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04\nLTS and Ubuntu 22.10. (CVE-2022-3570)\n\nIt was discovered that LibTIFF incorrectly handled memory in certain conditions\nwhen using tiffcrop. An attacker could trick a user into processing a specially\ncrafted tiff file and potentially use this issue to cause a denial of service.\nThis issue only affected to Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04\nLTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-3598)\n\nIt was discovered that LibTIFF did not properly perform bounds checking in      \ncertain operations when using tiffcrop. An attacker could trick a user into     \nprocessing a specially crafted tiff image file and potentially use this issue   \nto allow for information disclosure or to cause the application to crash.\n(CVE-2022-3599)\n\nIt was discovered that LibTIFF did not properly perform bounds checking in\ncertain operations when using tiffcrop. An attacker could trick a user into\nprocessing a specially crafted tiff image file and potentially use this issue\nto allow for information disclosure or to cause the application to crash. This\nissue only affected to Ubuntu 22.10. (CVE-2022-3597, CVE-2022-3626,\nCVE-2022-3627)\n","status":"published","published":"2022-11-08T08:13:42Z","modified":"2026-06-29T13:49:43.47440246Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}