CVE-2022-22844: Out-of-bounds Read

January 10, 2022 (updated November 16, 2022)

LibTIFF has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.

References

gitlab.com/libtiff/libtiff/-/issues/355
gitlab.com/libtiff/libtiff/-/merge_requests/287
nvd.nist.gov/vuln/detail/CVE-2022-22844

Code Behaviors & Features

Detect and mitigate CVE-2022-22844 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →