CVEs-PoC/2022/CVE-2022-1355.md

CVE-2022-1355

Description

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

POC

Reference

• https://gitlab.com/libtiff/libtiff/-/issues/400

Github

• https://github.com/ARPSyndicate/cvemon