CVE-2022-1355

MEDIUM Year: 2022
CVSS v3 Score
6.1
Medium
Weakness Type
CWE-121
View all →

Vulnerability Description

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.

Related Vulnerabilities

CVE-2021-39845

MEDIUM
CVSS:6.1(Medium)

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a craf...

CWE-1212021

CVE-2021-39846

MEDIUM
CVSS:6.1(Medium)

Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a stack overflow vulnerability due to insecure handling of a craf...

CWE-1212021

CVE-2024-21030

MEDIUM
CVSS:6.1(Medium)

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable v...

CWE-1212024

CVE-2024-41166

MEDIUM
CVSS:6.1(Medium)

Stack-based buffer overflow in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service...

CWE-1212024

CVE-2024-7784

MEDIUM
CVSS:6.1(Medium)

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot) in AXIS OS making it vulnerable to a so...

CWE-1212024

CVE-2023-0330

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.

CWE-1212023