OESA-2024-2047
This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.(CVE-2024-7006)
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openEuler:22.03-LTS-SP4 | libtiff | 0 |
Timeline
- Aug 23, 2024 CVE Published
- Aug 18, 2026 CVE Updated
- Nov 1, 2026 Security Advisory