CVE-2022-2521: Debian Linux
Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose() at tif_close.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input.
Affected products
Published 2022-08-31. Last modified 2026-06-17.