{"id":"CVE-2022-1354","title":"A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function","summary":"A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a cras…","severity":"none","cwe":["CWE-125"],"product":"libtiff","affected":["libtiff Not-Known"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T21:11:30.764403Z"},"published":"2022-08-31","updated":"2026-11-02","sourceUpdated":"2026-11-02T18:21:49.926Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-1354","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074404"},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/319"},{"url":"https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798"},{"url":"https://access.redhat.com/security/cve/CVE-2022-1354"},{"url":"https://security.netapp.com/advisory/ntap-20221014-0007/"},{"url":"https://security.gentoo.org/glsa/202210-10","label":"GLSA-202210-10"},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html","label":"[debian-lts-announce] 20230120 [SECURITY] [DLA 3278-1] tiff security update"},{"url":"https://www.debian.org/security/2023/dsa-5333","label":"DSA-5333"}],"tags":["cve.org"],"epss":0.00562,"epssPercentile":0.46853,"ingestedAt":"2026-11-05T19:30:42.773Z","slug":"CVE-2022-1354","body":"## Overview\n\nA heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.\n\n## Affected\n\n- `libtiff Not-Known`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}