A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.
CVE-2022-1354
CVSS base score
5.5 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-125, CWE-787
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
libtiff libtiff
fedoraproject fedora
redhat enterprise linux
netapp ontap select deploy administration utility
debian debian linux
References
- access.redhat.com Issue Tracking, Third Party Advisory
- bugzilla.redhat.com Exploit, Issue Tracking, Patch
- gitlab.com Patch
- gitlab.com Exploit, Issue Tracking, Patch
- lists.debian.org Mailing List, Third Party Advisory
- security.gentoo.org Third Party Advisory
- security.netapp.com Third Party Advisory
- www.debian.org Third Party Advisory
- access.redhat.com Issue Tracking, Third Party Advisory
- bugzilla.redhat.com Exploit, Issue Tracking, Patch