{"id":"CVE-2022-40090","aliases":["ALSA-2024:2289","AZL-43645","AZL-45399","CLSA-2025-1744116383","DEBIAN-CVE-2022-40090","EUVD-2022-43409","GHSA-279f-f7v7-h5h8","JLSEC-2025-311","OESA-2023-1599","RHSA-2024:2289","ROOT-OS-DEBIAN-11-CVE-2022-40090","SUSE-SU-2023:4736-1","SUSE-SU-2023:4869-1","UBUNTU-CVE-2022-40090","USN-6512-1"],"status":"published","title":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to...","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00947,"percentile":0.61452,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-835"],"published":"2023-08-22T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"tiff","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.5.0-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.4.0+0"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","fixed_in":["4.3.0-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","fixed_in":["4.3.0-18.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libtiff","fixed_in":["4.3.0-32.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"libtiff","fixed_in":["4.3.0-32.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"libtiff","fixed_in":["4.3.0-32.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-tiff","fixed_in":["4.2.0-1+deb11u8.aikido.17","4.2.0-1+deb11u8.aikido.19","4.2.0-1+deb11u8.aikido.18","4.2.0-1+deb11u8.root.io.16","4.2.0-1+deb11u8.aikido.20"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","fixed_in":["4.0.3-7ubuntu0.11+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","fixed_in":["4.0.6-1ubuntu0.8+esm14"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","fixed_in":["4.0.9-5ubuntu0.10+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"tiff","fixed_in":["4.1.0+git191117-2ubuntu0.20.04.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"tiff","fixed_in":["4.3.0-6ubuntu0.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:2","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"openjpeg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.1-12"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-2"}]}]},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.4.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-18.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-32.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-32.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-32.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Root:Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u8.aikido.17"},{"fixed":"4.2.0-1+deb11u8.aikido.19"},{"fixed":"4.2.0-1+deb11u8.aikido.18"},{"fixed":"4.2.0-1+deb11u8.root.io.16"},{"fixed":"4.2.0-1+deb11u8.aikido.20"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.74.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm11"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm14"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm4"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.11"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.7"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.3-7ubuntu0.11+esm11"}]}],"versions":["4.0.2-4ubuntu3","4.0.3-5ubuntu1","4.0.3-6","4.0.3-6ubuntu1","4.0.3-7","4.0.3-7ubuntu0.1","4.0.3-7ubuntu0.2","4.0.3-7ubuntu0.3","4.0.3-7ubuntu0.4","4.0.3-7ubuntu0.6","4.0.3-7ubuntu0.7","4.0.3-7ubuntu0.8","4.0.3-7ubuntu0.9","4.0.3-7ubuntu0.10","4.0.3-7ubuntu0.11","4.0.3-7ubuntu0.11+esm1","4.0.3-7ubuntu0.11+esm2","4.0.3-7ubuntu0.11+esm3","4.0.3-7ubuntu0.11+esm4","4.0.3-7ubuntu0.11+esm5","4.0.3-7ubuntu0.11+esm6","4.0.3-7ubuntu0.11+esm7","4.0.3-7ubuntu0.11+esm8","4.0.3-7ubuntu0.11+esm9","4.0.3-7ubuntu0.11+esm10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.6-1ubuntu0.8+esm14"}]}],"versions":["4.0.3-12.3ubuntu2","4.0.5-1","4.0.6-1","4.0.6-1ubuntu0.1","4.0.6-1ubuntu0.2","4.0.6-1ubuntu0.3","4.0.6-1ubuntu0.4","4.0.6-1ubuntu0.5","4.0.6-1ubuntu0.6","4.0.6-1ubuntu0.7","4.0.6-1ubuntu0.8","4.0.6-1ubuntu0.8+esm1","4.0.6-1ubuntu0.8+esm2","4.0.6-1ubuntu0.8+esm3","4.0.6-1ubuntu0.8+esm4","4.0.6-1ubuntu0.8+esm6","4.0.6-1ubuntu0.8+esm7","4.0.6-1ubuntu0.8+esm8","4.0.6-1ubuntu0.8+esm9","4.0.6-1ubuntu0.8+esm10","4.0.6-1ubuntu0.8+esm11","4.0.6-1ubuntu0.8+esm12","4.0.6-1ubuntu0.8+esm13"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-5ubuntu0.10+esm4"}]}],"versions":["4.0.8-5","4.0.8-6","4.0.9-1","4.0.9-2","4.0.9-3","4.0.9-4","4.0.9-4ubuntu1","4.0.9-5","4.0.9-5ubuntu0.1","4.0.9-5ubuntu0.2","4.0.9-5ubuntu0.3","4.0.9-5ubuntu0.4","4.0.9-5ubuntu0.5","4.0.9-5ubuntu0.6","4.0.9-5ubuntu0.7","4.0.9-5ubuntu0.8","4.0.9-5ubuntu0.9","4.0.9-5ubuntu0.10","4.0.9-5ubuntu0.10+esm1","4.0.9-5ubuntu0.10+esm2","4.0.9-5ubuntu0.10+esm3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2ubuntu0.20.04.11"}]}],"versions":["4.0.10+git191003-1","4.1.0+git191117-1","4.1.0+git191117-2","4.1.0+git191117-2build1","4.1.0+git191117-2ubuntu0.20.04.1","4.1.0+git191117-2ubuntu0.20.04.2","4.1.0+git191117-2ubuntu0.20.04.3","4.1.0+git191117-2ubuntu0.20.04.4","4.1.0+git191117-2ubuntu0.20.04.5","4.1.0+git191117-2ubuntu0.20.04.6","4.1.0+git191117-2ubuntu0.20.04.7","4.1.0+git191117-2ubuntu0.20.04.8","4.1.0+git191117-2ubuntu0.20.04.9","4.1.0+git191117-2ubuntu0.20.04.10"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.0-6ubuntu0.7"}]}],"versions":["4.3.0-1","4.3.0-2","4.3.0-3","4.3.0-3build1","4.3.0-4","4.3.0-5","4.3.0-6","4.3.0-6ubuntu0.1","4.3.0-6ubuntu0.2","4.3.0-6ubuntu0.3","4.3.0-6ubuntu0.4","4.3.0-6ubuntu0.5","4.3.0-6ubuntu0.6"],"bundled":2}],"products":[{"vendor":"libtiff","product":"libtiff"}],"references":[{"url":"https://gitlab.com/libtiff/libtiff/-/issues/455","tags":["x_transferred","Exploit","Issue Tracking","report","web"]},{"url":"https://gitlab.com/libtiff/libtiff/-/merge_requests/386","tags":["x_transferred","Issue Tracking","Patch","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40090","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-279f-f7v7-h5h8"},{"url":"https://access.redhat.com/errata/RHSA-2024:2289","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40090","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3618","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40745","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41175","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6228","tags":["report"]},{"url":"https://bugzilla.redhat.com/2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235265","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240995","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2289.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1744116383.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40090.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-40090","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1599","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240995","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2289.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40090","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3618","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/529","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6228","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40745","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41175","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234736-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199483","tags":["report"]},{"url":"https://bugzilla.suse.com/1210231","tags":["report"]},{"url":"https://bugzilla.suse.com/1211478","tags":["report"]},{"url":"https://bugzilla.suse.com/1212398","tags":["report"]},{"url":"https://bugzilla.suse.com/1214680","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2731","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234869-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-40090","tags":["report"]},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/d093eb5d961e21ba51420bc22382c514683a4d91","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6512-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-3576","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-40090","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T14:40:47.985Z","updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-43409","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-03T14:40:47Z","updated_at":"2026-11-03T00:27:54.233481Z"}],"ghsa":[{"id":"GHSA-279f-f7v7-h5h8","title":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to...","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T21:30:26Z","modified":"2024-04-04T07:07:16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:56:48.229282Z"}],"nvd":[{"id":"CVE-2022-40090","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T19:16:23.943Z","modified":"2026-06-17T05:00:52.297Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-835"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"AZL-43645","title":"CVE-2022-40090 affecting package openjpeg2 2.3.1-12","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T19:16:23Z","modified":"2026-04-21T04:31:05.065477Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:05.284713Z"},{"id":"AZL-45399","title":"CVE-2022-40090 affecting package openjpeg2 2.3.1-12","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T19:16:23Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.321068Z"},{"id":"DEBIAN-CVE-2022-40090","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T19:16:23.943Z","modified":"2026-11-03T08:03:05.950934168Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"JLSEC-2025-311","title":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause...","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2025-11-25T22:18:43.603Z","modified":"2026-07-18T00:01:16.969941638Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2023-1599","title":"libtiff security update","description":"This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.(CVE-2022-40090)","status":"published","published":"2023-09-09T11:06:03Z","modified":"2026-08-18T01:17:53.271225902Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2024:2289","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T16:53:08Z","modified":"2026-07-03T10:05:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2022-40090","title":"CVE-2022-40090 in tiff - Patched by Root","description":"Root has patched CVE-2022-40090 in the tiff package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-02T13:00:50Z","modified":"2026-09-02T16:15:02.227750371Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"UBUNTU-CVE-2022-40090","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-04-22T13:28:16.749659Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2024:2289","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)\n* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)\n* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)\n* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)\n* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:09.234769659Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1744116383","title":"libtiff: Fix of 4 CVEs","description":"- CVE-2024-7006: check return value of _TIFFCreateAnonField() to avoid potential DoS via\n  memory allocation failures\n- CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer\n  overflow and potential application crash\n- CVE-2022-40090: improve IFD loop handling in TIFFReadDirectory to prevent DoS via\n  crafted TIFF files\n- CVE-2023-2731: handle missing end-of-information marker in LZWDecode() to prevent\n  NULL pointer dereference and potential DoS","status":"published","published":"2025-04-08T12:46:28Z","modified":"2026-10-21T10:45:08.614298116Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CVE-2022-40090","description":"An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-10-28T02:30:27.354974737Z","updated_at":"2026-11-02T15:44:26.860704Z"},{"id":"SUSE-SU-2023:4736-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).\n- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).\n- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).\n- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).\n","status":"published","published":"2023-12-12T14:41:31Z","modified":"2026-02-04T03:52:13.259159Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4869-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2023-2731: Fix null pointer deference in LZWDecode() (bsc#1211478).\n- CVE-2023-1916: Fix out-of-bounds read in extractImageSection() (bsc#1210231).\n- CVE-2023-26965: Fix heap-based use after free in loadImage() (bsc#1212398).\n- CVE-2022-40090: Fix infinite loop in TIFFReadDirectory() (bsc#1214680).\n","status":"published","published":"2023-12-14T15:26:46Z","modified":"2026-02-04T04:21:31.775627Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6512-1","title":"tiff vulnerabilities","description":"It was discovered that LibTIFF could be made to run into an infinite loop.\nIf a user or an automated system were tricked into opening a specially\ncrafted image file, an attacker could possibly use this issue to cause a\ndenial of service. (CVE-2022-40090)\n\nIt was discovered that LibTIFF could be made leak memory. If a user or an\nautomated system were tricked into opening a specially crafted image file,\nan attacker could possibly use this issue to cause a denial of service.\n(CVE-2023-3576)\n","status":"published","published":"2023-11-23T21:06:23Z","modified":"2026-06-29T13:50:59.606106497Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}