Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2022-3970
PUBLISHED
More InfoOfficial Page
Assigner-VulDB
Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5
View Known Exploited Vulnerability (KEV) details
Published At-13 Nov, 2022 | 00:00
Updated At-15 Apr, 2025 | 13:15
Rejected At-
▼CVE Numbering Authority (CNA)
LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

Affected Products
Vendor
unspecified
Product
LibTIFF
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
CWECWE-189CWE-189 Numeric Error -> CWE-190 Integer Overflow
Type: CWE
CWE ID: CWE-189
Description: CWE-189 Numeric Error -> CWE-190 Integer Overflow
Metrics
VersionBase scoreBase severityVector
3.16.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Version: 3.1
Base score: 6.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137
N/A
https://oss-fuzz.com/download?testcase_id=5738253143900160
N/A
https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be
N/A
https://vuldb.com/?id.213549
N/A
https://security.netapp.com/advisory/ntap-20221215-0009/
N/A
https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
mailing-list
https://support.apple.com/kb/HT213843
N/A
https://support.apple.com/kb/HT213841
N/A
Hyperlink: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137
Resource: N/A
Hyperlink: https://oss-fuzz.com/download?testcase_id=5738253143900160
Resource: N/A
Hyperlink: https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be
Resource: N/A
Hyperlink: https://vuldb.com/?id.213549
Resource: N/A
Hyperlink: https://security.netapp.com/advisory/ntap-20221215-0009/
Resource: N/A
Hyperlink: https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
Resource:
mailing-list
Hyperlink: https://support.apple.com/kb/HT213843
Resource: N/A
Hyperlink: https://support.apple.com/kb/HT213841
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137
x_transferred
https://oss-fuzz.com/download?testcase_id=5738253143900160
x_transferred
https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be
x_transferred
https://vuldb.com/?id.213549
x_transferred
https://security.netapp.com/advisory/ntap-20221215-0009/
x_transferred
https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
mailing-list
x_transferred
https://support.apple.com/kb/HT213843
x_transferred
https://support.apple.com/kb/HT213841
x_transferred
Hyperlink: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53137
Resource:
x_transferred
Hyperlink: https://oss-fuzz.com/download?testcase_id=5738253143900160
Resource:
x_transferred
Hyperlink: https://gitlab.com/libtiff/libtiff/-/commit/227500897dfb07fb7d27f7aa570050e62617e3be
Resource:
x_transferred
Hyperlink: https://vuldb.com/?id.213549
Resource:
x_transferred
Hyperlink: https://security.netapp.com/advisory/ntap-20221215-0009/
Resource:
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html
Resource:
mailing-list
x_transferred
Hyperlink: https://support.apple.com/kb/HT213843
Resource:
x_transferred
Hyperlink: https://support.apple.com/kb/HT213841
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found