Skip to main content

Divide By Zero

CVE-2022-0909

Medium
5.5/10

Summary

Divide By Zero error in tiffcrop in libtiff versions prior to 4.4.0rc1 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f8d0f9aa.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-369 - Divide By Zero

The product divides a value by zero.

References

Advisory Timeline

  • Published