VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 2, 2010· Updated Jun 16, 2026

CVE-2010-2595

CVE-2010-2595

Description

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers an array index error, related to "downsampled OJPEG input."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • LibTIFF/Libtiff3 versions
    cpe:2.3:a:libtiff:libtiff:3.9.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:libtiff:libtiff:3.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:libtiff:libtiff:3.9.2:*:*:*:*:*:*:*
    • (no CPE)range: 3.9.0, 3.9.2

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.