CVE-2015-7554: libtiff 7PK - Security Features

Vulnerability summary

CVE-2015-7554 is a critical (CVSS 9.8) 7PK - Security Features vulnerability in libtiff. EPSS estimates a 4.19% chance of exploitation in the next 30 days, higher than 90.8% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 08-01-2016
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The _TIFFVGetField function in tif_dir.c in libtiff 4.0.6 allows attackers to cause a denial of service (invalid memory write and crash) or possibly have unspecified other impact via crafted field data in an extension tag in a TIFF image.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.