CVE-2022-48281
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
Published Jan 23, 2023 · updated Oct 15, 2026
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jan 23, 2023 · OSV.dev
Detected
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
Oct 15, 2026 · OSV.dev
Fix available
tiff fixed in 4.4.0-r2; tiff fixed in 4.5.0-r3; tiff fixed in 4.5.0-r3; tiff fixed in 4.5.0-r3
Oct 15, 2026 · OSV.dev
Fix available
tiff fixed in 4.4.0-r2
Oct 15, 2026 · OSV.dev
Fix available
tiff fixed in 4.5.0-r3
Oct 15, 2026 · OSV.dev
Updated
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.
Affected
- Alpine:v3.17 tiff0 → 4.4.0-r2
- Alpine:v3.18 tiff0 → 4.5.0-r3
- Alpine:v3.19 tiff0 → 4.5.0-r3
- Alpine:v3.20 tiff0 → 4.5.0-r3
- Alpine:v3.21 tiff0 → 4.5.0-r3
- Alpine:v3.22 tiff0 → 4.5.0-r3
- Alpine:v3.23 tiff0 → 4.5.0-r3
- Alpine:v3.24 tiff0 → 4.5.0-r3