| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | < 4.7.2 | 4.7.2 |
| ai inference server | ≥ 3.2.0, < 3.2.2≥ 3.3.0, < 3.3.5 | 3.2.23.3.5 |
| codeready linux builder | = 10.0= 8.0= 9.0 | |
| codeready linux builder eus | = 10.0= 9.4= 9.6 | |
| openshift ai | ≥ 3.4, < 3.4.3 | 3.4.3 |
A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free