CVE-2022-1355: Improper Restriction of Operations within the Bounds of a Memory Buffer

August 31, 2022 (updated February 23, 2023)

A stack buffer overflow flaw was found in Libtiffs’ tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

References

access.redhat.com/security/cve/CVE-2022-1355
bugzilla.redhat.com/show_bug.cgi?id=2074415
gitlab.com/libtiff/libtiff/-/issues/400
gitlab.com/libtiff/libtiff/-/merge_requests/323
nvd.nist.gov/vuln/detail/CVE-2022-1355

Code Behaviors & Features

Detect and mitigate CVE-2022-1355 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →