| Package | Affected versions | Patched versions |
|---|---|---|
| libtiff | ≤ 3.8.1 |
The EstimateStripByteCounts function in TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, which triggers an infinite loop.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free