Null Source Pointer Vulnerability in libtiff
Summary
CVE-2022-0561: Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. Affects tiff across 3 version ranges.
< 4.3.0-r0
>= 616624213caa4017313ca0aac850c1101759d4ff, <= d21dcc67d0d3f4686ee989a085ad2bea9c58259d
< eecb0712f4c3a5b449f70c57988260a667ddbdef
Fixed in 4.3.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libtiff is an open-source library used for reading and writing TIFF image files. It provides various functions for handling TIFF files and is widely used in applications that deal with image processing and manipulation. However, versions of libtiff from 3.9.0 to 4.3.0 are vulnerable to a null source pointer vulnerability in the TIFFFetchStripThing() function in the tif_dirread.c file. This vulnerability can be exploited by a crafted TIFF file, potentially leading to a denial of service.
Vulnerability Detail
The null source pointer vulnerability in libtiff arises when a null pointer is passed as an argument to the memcpy() function within the TIFFFetchStripThing() function. This vulnerability can be triggered by a specially crafted TIFF file. If successfully exploited, it could result in a denial of service, causing the application using libtiff to crash or become unresponsive. The vulnerability has a CVSS v3 score of 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
4.3.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade tiffTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The null source pointer vulnerability in libtiff can be mitigated by updating the library to version 4.3.0 or later. Users who compile libtiff from sources should apply the provided fix. It is recommended to stay updated with the latest stable release of libtiff to ensure the security of your applications.
See every vulnerability recorded for tiff →
FAQ
libtiff is an open-source library used for reading and writing TIFF image files. It provides functions for handling various aspects of TIFF files, such as compression, color spaces, and metadata.
Versions of libtiff from 3.9.0 to 4.3.0 are affected by this vulnerability.
If successfully exploited, this vulnerability can lead to a denial of service, causing the application using libtiff to crash or become unresponsive.
To fix this vulnerability, update your libtiff library to version 4.3.0 or later. If you compile libtiff from sources, apply the fix available with commit eecb0712.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for tiff.
