CVEs-PoC/2022/CVE-2022-22844.md

CVE-2022-22844

Description

LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.

POC

Reference

• https://gitlab.com/libtiff/libtiff/-/issues/355

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/waugustus/crash_analysis
• https://github.com/waugustus/poc
• https://github.com/waugustus/waugustus