There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libtiff | Libtiff | 4.4.0-rc1 (including) | 4.4.0-rc1 (including) |
| Red Hat Enterprise Linux 8 | RedHat | libtiff-0:4.0.9-26.el8_7 | * |
| Red Hat Enterprise Linux 9 | RedHat | libtiff-0:4.4.0-5.el9_1 | * |
| Tiff | Ubuntu | kinetic | * |
| Tiff | Ubuntu | lunar | * |
| Tiff | Ubuntu | trusty | * |
| Tiff | Ubuntu | xenial | * |