A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability.
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.223553 | third party advisory vdb entry technical description |
| https://vuldb.com/?ctiid.223553 | signature third party advisory permissions required |
| https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF | related third party advisory exploit |
| https://github.com/10cksYiqiyinHangzhouTechnology/Security-Issue-Report-of-TinyTIFF/blob/main/id8 | third party advisory exploit |