CVE-2022-0562

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0562
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0562.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-0562
Downstream
ALPINE (1)
ALSA (2)
AZL (2)
BELL (1)
CLEANSTART (1)
DEBIAN (1)
JLSEC (1)
MGASA (1)
OESA (2)
openSUSE (1)
RHSA (2)
RLSA (1)
SUSE (2)
UBUNTU (1)
Related
ALSA (2)
openSUSE (1)
SUSE (2)
Published
2022-02-11T00:00:00Z
Modified
2026-10-24T14:10:40Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0562.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/build/omnibus-mirror/libtiff

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff
Events
Introduced
f7b79dc7dc86ccbaabe9882e2b9ffa5ee8dac917
Fixed
561599c99f987dc32ae110370cfdd7df7975586b
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "4.0"
                },
                {
                    "last_affected": "4.3.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "561599c99f987dc32ae110370cfdd7df7975586b"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/libtiff/libtiff
Events
Introduced
f7b79dc7dc86ccbaabe9882e2b9ffa5ee8dac917
Last Affected
d21dcc67d0d3f4686ee989a085ad2bea9c58259d
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "4.0.0"
                },
                {
                    "last_affected": "4.3.0"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

Other
Release-v4-0-0
Release-v4-0-1
Release-v4-0-2
Release-v4-0-3
Release-v4-0-4
Release-v4-0-4beta
Release-v4-0-5
Release-v4-0-6
Release-v4-0-7
Release-v4-0-8
Release-v4-0-9
v4.*
v4.0.0
v4.0.1
v4.0.10
v4.0.2
v4.0.3
v4.0.4
v4.0.4beta
v4.0.5
v4.0.6
v4.0.7
v4.0.8
v4.0.9
v4.1.0
v4.2.0
v4.3.0
v4.3.0rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0562.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "129003738256904974434032312831734533679",
            "length": 17287
        },
        "id": "CVE-2022-0562-5e6decd3",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff@561599c99f987dc32ae110370cfdd7df7975586b",
        "target": {
            "file": "libtiff/tif_dirread.c",
            "function": "TIFFReadDirectory"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "222657081805446374098817547520940382651",
                "46343763023096549359691253295778653557",
                "8490074471616727942160351420981319456",
                "262687486300517843764821785466064460"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-0562-acf8b664",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://gitlab.com/gitlab-org/build/omnibus-mirror/libtiff@561599c99f987dc32ae110370cfdd7df7975586b",
        "target": {
            "file": "libtiff/tif_dirread.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-24T14:10:40Z"