CVE-2010-2482

Fixed in a distro release EPSS 9%

LibTIFF 3.9.4 and earlier does not properly handle an invalid td_stripbytecount field, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted TIFF file, a different vulnerability than CVE-2010-2443.

Published 2010-07-06 · CVE record · OSV

Products: libtiff

Distro releases