Wind River Support Network

HomeDefectsLIN1021-4247

Fixed

LIN1021-4247 : Security Advisory - tiff - CVE-2022-2520

Created: Sep 3, 2022 Updated: Dec 1, 2022

Resolved Date: Dec 1, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.15

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.

CREATE(Triage):(User=admin) CVE-2022-2520 (https://nvd.nist.gov/vuln/detail/CVE-2022-2520)

CVEs

CVE-2022-2520