CVE-2022-0561

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
libtifflibtiff>=3.9.0, <=4.3.0

References

Timeline

Published
Feb 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-05625.5Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4CVE-2022-05635.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" envirCVE-2022-05645.3A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could explCVE-2022-05656.4Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.CVE-2022-05668.8It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when procCVE-2022-05679.1A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bCVE-2022-05694.3Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.CVE-2022-05709.8Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.CVE-2022-05716.1Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.CVE-2022-05727.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-05738.8JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege EsCVE-2022-05746.5Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
CVE-2022-0561: Medium severity, CVSS 5.5 | Vulnix