Loading HuntDB...

GHSA-8rfm-2x4g-8xh5

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to tiffcrop.

Related CVEs

Key Information

GHSA ID
GHSA-8rfm-2x4g-8xh5
Published
August 18, 2022 12:00 AM
Last Modified
January 21, 2023 3:30 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 21, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.