CVE-2022-2058: Divide By Zero

June 30, 2022 (updated November 9, 2023)

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

References

gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2058.json
gitlab.com/libtiff/libtiff/-/issues/428
gitlab.com/libtiff/libtiff/-/merge_requests/346
nvd.nist.gov/vuln/detail/CVE-2022-2058

Code Behaviors & Features

Detect and mitigate CVE-2022-2058 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →