CVE-2022-2520: Debian Linux
Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash when reading a crafted input.
Affected products
Published 2022-08-31. Last modified 2026-06-17.