CVE Vulnerabilities

CVE-2022-2519

Double Free

Published: Aug 31, 2022 | Modified: Nov 21, 2024
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
6.5 MODERATE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1

Weakness

The product calls free() twice on the same memory address.

Affected Software

Name Vendor Start Version End Version
Libtiff Libtiff 4.4.0-rc1 (including) 4.4.0-rc1 (including)
Red Hat Enterprise Linux 8 RedHat libtiff-0:4.0.9-26.el8_7 *
Red Hat Enterprise Linux 9 RedHat libtiff-0:4.4.0-5.el9_1 *
Tiff Ubuntu kinetic *
Tiff Ubuntu lunar *
Tiff Ubuntu trusty *
Tiff Ubuntu xenial *

Potential Mitigations

References