There is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc1
The product calls free() twice on the same memory address.
Link | Tags |
---|---|
https://gitlab.com/libtiff/libtiff/-/issues/423 | issue tracking patch exploit third party advisory |
https://gitlab.com/libtiff/libtiff/-/merge_requests/378 | issue tracking patch exploit third party advisory |
https://www.debian.org/security/2023/dsa-5333 | third party advisory vendor advisory |