CyberRota Analysis
AI-GeneratedThe `tiff2pdf` utility in libtiff is vulnerable to a heap-buffer overflow due to an integer truncation error when handling specially crafted BigTIFF files. This flaw allows attackers to exploit the memory allocation process, potentially leading to application crashes and severe memory corruption. Organizations using libtiff, particularly those processing BigTIFF files, should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
A flaw was found in libtiff. A heap-buffer overflow vulnerability exists in the `tiff2pdf` utility due to an integer truncation error when processing crafted BigTIFF files. An attacker can provide a specially crafted BigTIFF file, causing a 64-bit `StripByteCounts` value to be truncated to a 32-bit integer. This leads to an undersized memory allocation and a subsequent out-of-bounds memory copy, resulting in a crash and severe memory corruption.