CVE-2009-3296: Gallium.inria Camimages

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple integer overflows in tiffread.c in CamlImages 2.2 might allow remote attackers to execute arbitrary code via TIFF images containing large width and height values that trigger heap-based buffer overflows.

Affected products

• Gallium.inria Camimages: version 2.2 only

Published 2009-10-20. Last modified 2026-06-16.