CVE-2022-1056

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
libtiff	libtiff	=4.3.0

References

https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.jsonThird Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/391Exploit, Issue Tracking, Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/merge_requests/307Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202210-10Third Party Advisory
https://security.netapp.com/advisory/ntap-20221228-0008/Third Party Advisory
https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.jsonThird Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/391Exploit, Issue Tracking, Third Party Advisory
https://gitlab.com/libtiff/libtiff/-/merge_requests/307Issue Tracking, Patch, Third Party Advisory
https://security.gentoo.org/glsa/202210-10Third Party Advisory
https://security.netapp.com/advisory/ntap-20221228-0008/Third Party Advisory

Timeline

Published: Mar 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10579.8The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a S CVE-2022-10586.1Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.CVE-2022-10596.1Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user crede CVE-2022-10617.5Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-10624.8The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow high privilege users suc CVE-2022-10634.8The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Message CVE-2022-10648.8SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.CVE-2022-10658.8A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This is CVE-2022-10668.2Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user crede CVE-2022-10676.5Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and CVE-2022-10687.5Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may caus CVE-2022-10697.5A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22