Wind River Support Network

HomeDefectsLINCD-8486

Fixed

LINCD-8486 : Security Advisory - tiff - CVE-2022-0891

Created: Mar 9, 2022 Updated: Apr 27, 2022

Resolved Date: Mar 29, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.17.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

/tools/tiffcrop.c:6866 - Heap use after free in extractImageSection

https://gitlab.com/libtiff/libtiff/-/commit/232282fd8f9c21eefe8d2d2b96cdbbb172fe7b7c

CREATE(Triage):(User=admin) CVE-2022-0891 (https://nvd.nist.gov/vuln/detail/CVE-2022-0891)

CVEs

CVE-2022-0891