Wind River Support Network

HomeDefectsLIN1018-1904

Fixed

LIN1018-1904 : Security Advisory - tiff - CVE-2018-14373

Created: Jul 31, 2018 Updated: Sep 13, 2022

Resolved Date: Dec 20, 2018

Found In Version: unknown

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

An issue was discovered in LibTIFF 4.0.9. In TIFFFindField in tif_dirinfo.c, the structure tif is being dereferenced without first checking that the structure is not empty and has the requested fields (tif_foundfield). In the call sequences following from the affected library functions (TIFFVGetField, TIFFVGetFieldDefaulted, TIFFVStripSize, TIFFScanlineSize, TIFFTileSize, TIFFGetFieldDefaulted, and TIFFGetField), this sanitization of the tif structure is never being done and, hence, using them with an invalid or empty tif structure will trigger a buffer overflow, leading to a crash.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14373