MEDIUM 5.5 Microsoft

CVE-2022-0562

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources a fix is available with commit 561599c.

Microsoft Security Update 2022-Feb: Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources a fix is available with commit 561599c.

Affected Products

References

Published: 2022-02-08 · Source: Microsoft · Feed updated: 2026-09-07
This medium severity vulnerability with a CVSS score of 5.5 was published on 2022-02-08 via Microsoft. Affected: cm1 libtiff 4.1.0-3 on CBL Mariner 1.0, cbl2 libtiff 4.3.0-2 on CBL Mariner 2.0.
vulnfeed aggregates 10539 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.