VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 13, 2022· Updated Apr 15, 2025

LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow

CVE-2022-3970

Description

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

45

Patches

Vulnerability mechanics

Root cause

"An integer overflow occurs in TIFFReadRGBATileExt when processing strips or tiles larger than 2 GB."

Attack vector

The vulnerability can be triggered remotely by an attacker who crafts a malicious TIFF file. When this file is processed by the vulnerable function, the integer overflow can lead to unexpected behavior. The exact nature of the payload and how it exploits the overflow is not detailed, but it is known that the exploit has been publicly disclosed and may be used [ref_id=1].

Affected code

The vulnerability resides in the `TIFFReadRGBATileExt` function, located in the file `libtiff/tif_getimage.c`. The specific lines affected involve calculations related to `tile_ysize` and `read_ysize`, where the original code was susceptible to integer overflow when these values were large [ref_id=1].

What the fix does

The patch addresses the integer overflow by casting the relevant variables to `size_t` before performing calculations. This ensures that calculations involving potentially large strip or tile sizes, especially those exceeding 2 GB, are handled correctly without overflowing. The change in `libtiff/tif_getimage.c` prevents the integer overflow that could otherwise lead to memory corruption or other vulnerabilities [ref_id=1].

Preconditions

  • inputThe attacker must provide a specially crafted TIFF file.
  • networkThe vulnerability can be exploited remotely.

Generated on Jun 10, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

8

News mentions

0

No linked articles in our index yet.