Vulnerabilities > CVE-2022-2867 - Integer Underflow (Wrap or Wraparound) vulnerability in multiple products
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to tiffcrop (likely via tricking a user to run tiffcrop on it with certain parameters) could cause a crash or in some cases, further exploitation.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 21 | |
| OS | 2 | |
| OS | 2 |