| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | = 3.8.0 |
The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free