CyberRota Analysis
AI-GeneratedThe libtiff rgb2ycbcr utility is vulnerable due to an integer overflow in the cvtRaster() function, which can lead to undersized heap allocations and a subsequent heap-based buffer overflow when processing specially crafted TIFF images. This vulnerability poses a risk of arbitrary code execution or application crashes, making it critical for developers and organizations that utilize libtiff for image processing to prioritize mitigation efforts. Users of affected products should assess their exposure and implement necessary safeguards against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image