VYPR
← All advisories
Unrated severityOSV Advisory· Published Feb 9, 2019· Updated Aug 4, 2024

CVE-2019-7663

CVE-2019-7663

Description

An Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff/tif_dirwrite.c in LibTIFF 4.0.10, affecting the cpSeparateBufToContigBuf function in tiffcp.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted tiff file. This is different from CVE-2018-12900.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Patches

Vulnerability mechanics

Root cause

"An integer overflow in the calculation of `tilew*spp` leads to an invalid address dereference."

Attack vector

Remote attackers can leverage this vulnerability by providing a crafted TIFF file to the `tiffcp` utility. This crafted file causes an integer overflow during the processing of tile dimensions and samples per pixel. The overflow leads to a segmentation fault, resulting in a denial-of-service condition [ref_id=1].

Affected code

The vulnerability resides in the `cpSeparateBufToContigBuf` function within `tiffcp.c`, specifically at line 1245. The issue arises from the calculation `tilew*spp` which can overflow.

What the fix does

The patch introduces a check to prevent integer overflow when calculating `tilew * spp`. Specifically, it verifies if `0x7fffffff / tilew < spp` before performing the multiplication. This ensures that the product does not exceed the maximum value for a 32-bit signed integer, thus preventing the subsequent invalid memory access and crash [ref_id=1].

Preconditions

  • inputA specially crafted TIFF file.

Generated on Jun 1, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

8

News mentions

0

No linked articles in our index yet.