VDB

OESA-2024-2047

OESA-2024-2047 PUBLISHED CVSS 7.5 HIGH

This provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library. Security Fix(es): A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, eventually leading to a denial of service.(CVE-2024-7006)

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
openEuler:22.03-LTS-SP4libtiff0

Timeline

  • Aug 23, 2024 CVE Published
  • Aug 18, 2026 CVE Updated
  • Nov 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 50/day Open console ›