CVE-2022-2520: debian debian_linux Incorrect Calculation of Buffer Size
CVSS: 6.5v3.1MediumModified
AliasesALPINE-CVE-2022-2520DEBIAN-CVE-2022-2520
Published 31-08-2022Last modified 03-08-2024
Vulnerability summary
CVE-2022-2520 is a medium (CVSS 6.5) Incorrect Calculation of Buffer Size vulnerability in debian debian_linux. EPSS estimates a 1.19% chance of exploitation in the next 30 days, higher than 67.3% of scored vulnerabilities. 2 public exploits are recorded.
CVSS score
6.5/10
010
Medium · v3.1 (NVD)EPSS score
1.19%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference
Advisory lineage
Upstream 0 · Downstream 7 · Related 3Timeline
- 31-08-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.
CVSS metrics
3 scores · 3 sources · 1 versionMedium 6.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.19%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
0.00 pp
From 1.19% on 18-09-2026
18-09-202618-10-2026
EPSS score1.19%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (gitlab.com)
Maturity: unknown
Exploit Reference (gitlab.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-131Incorrect Calculation of Buffer SizeThe product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
- CWE-617Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
Affected systems
Debian2 products
- tiff< 4.4.0-6
- debian_linuxEOL11.0
Alpine1 product
- tiff< 4.4.0-r3 | < 4.4.0-r1
Libtiff1 product
- libtiff4.4.0:rc1
3 vendors · 4 products
