Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-286

LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from p...

JLSEC Published
Modified
Affected Packages
Libtiff_jll < 4.5.1+0
Aliases / Upstream
CVE-2022-3626

LibTIFF 4.4.0 has an out-of-bounds write in TIFFmemset in libtiff/tifunix.c:340 when called from processCropSelections, tools/tiffcrop.c:7619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 236b7191.

References