Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-2630

Fixed in a distro release EPSS 5%

The TIFFReadDirectory function in LibTIFF 3.9.0 does not properly validate the data types of codec-specific tags that have an out-of-order position in a TIFF file, which allows remote attackers to cause a denial of service (application crash) via a crafted file, a different vulnerability than CVE-2010-2481.

Published 2010-07-06 · CVE record · OSV

Products: libtiff

Distro releases

ReleasePackageFixed in
Debian 12tiff3.9.6-1
Debian 13tiff3.9.6-1
Debian 14tiff3.9.6-1
Debian 6.0tiff3.9.4-5+squeeze5