Total vulnerabilities in the database
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.
| Software | From | Fixed in |
|---|---|---|
| libtiff / libtiff | - | 4.5.0 |
| redhat / enterprise_linux | 9.0 | 9.0.x |
| fedoraproject / fedora | 38 | 38.x |