CVEs-PoC/2019/CVE-2019-14973.md

CVE-2019-14973

Description

_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer Overflow checks because they rely on compiler behavior that is undefined by the applicable C standards. This can, for example, lead to an application crash.

POC

Reference

• http://packetstormsecurity.com/files/155095/Slackware-Security-Advisory-libtiff-Updates.html

Github

• https://github.com/ARPSyndicate/cvemon