<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-02T22:11:00.432147+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/alsa-2023:0095</id>
    <title>ALSA-2023:0095 — Moderate: libtiff security update</title>
    <updated>2026-10-02T22:11:00.663786+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> AlmaLinux:8: libtiff, AlmaLinux:8: libtiff-devel, AlmaLinux:8: libtiff-tools</p>
<p>The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.</p>
<p>Security Fix(es):</p>
<p>* LibTiff: DoS from Divide By Zero Error (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
* libtiff: Double free or corruption in rotateImage() function at tiffcrop.c (CVE-2022-2519)
* libtiff: uint32_t underflow leads to out of bounds read and write in tiffcrop.c (CVE-2022-2867)
* libtiff: tiffcrop.c has uint32_t underflow which leads to out of bounds read and write in extractContigSamples8bits() (CVE-2022-2869)
* libtiff: tiffcrop: heap-buffer-overflow in extractImageSection in tiffcrop.c (CVE-2022-2953)
* libtiff: Assertion fail in rotateImage() function at tiffcrop.c (CVE-2022-2520)
* libtiff: Invalid pointer free operation in TIFFClose() at tif_close.c (CVE-2022-2521)
* libtiff: Invalid crop_width and/or crop_length could cause an out-of-bounds read in reverseSamples16bits() (CVE-2022-2868)</p>
<p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/alsa-2023:0095"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bdu:2023-01715</id>
    <title>bdu:2023-01715</title>
    <updated>2026-10-02T22:11:00.663857+00:00</updated>
    <content>bdu:2023-01715</content>
    <link href="https://cve.radiocsirt.org/vuln/bdu:2023-01715"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/bell-cve-2022-2056</id>
    <title>Withdrawn: BELL-CVE-2022-2056 — CVE-2022-2056 does not affect BellSoft software</title>
    <updated>2026-10-02T22:11:00.663875+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>
          <strong>Withdrawn by the publisher.</strong>
        </p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/bell-cve-2022-2056"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103</id>
    <title>certfr-2024-avi-1103 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…</title>
    <updated>2026-10-02T22:11:00.663891+00:00</updated>
    <content>certfr-2024-avi-1103</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-12168</id>
    <title>EUVD-2026-12168</title>
    <updated>2026-10-02T22:11:00.663905+00:00</updated>
    <content>EUVD-2026-12168</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-12168"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2022-2056</id>
    <title>fkie_cve-2022-2056</title>
    <updated>2026-10-02T22:11:00.663915+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2022-2056"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-9q2x-2q4w-wffw</id>
    <title>GHSA-9q2x-2q4w-wffw</title>
    <updated>2026-10-02T22:11:00.663936+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-9q2x-2q4w-wffw"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2022-2056</id>
    <title>gsd-2022-2056</title>
    <updated>2026-10-02T22:11:00.663949+00:00</updated>
    <content>gsd-2022-2056</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2022-2056"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2022-2056</id>
    <title>msrc_CVE-2022-2056 — Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file…</title>
    <updated>2026-10-02T22:11:00.663959+00:00</updated>
    <content>msrc_CVE-2022-2056</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2022-2056"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/oesa-2022-2007</id>
    <title>OESA-2022-2007 — libtiff security update</title>
    <updated>2026-10-02T22:11:00.663975+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: libtiff, openEuler:20.03-LTS-SP3: libtiff, openEuler:22.03-LTS: libtiff</p>
<p>This  provides support for the Tag Image File Format (TIFF), a widely used format for storing image data. The latest version of the TIFF specification is available on-line in several different formats.And contains command-line programs for manipulating TIFF format image files using the libtiff library.

Security Fix(es):

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.(CVE-2022-2056)

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.(CVE-2022-2058)</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/oesa-2022-2007"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2024:12176-1</id>
    <title>openSUSE-SU-2024:12176-1 — libtiff-devel-32bit-4.4.0-2.1 on GA media</title>
    <updated>2026-10-02T22:11:00.664002+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>libtiff-devel-32bit-4.4.0-2.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2024:12176-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2022:2647-2</id>
    <title>SUSE-SU-2022:2647-2 — Security update for tiff</title>
    <updated>2026-10-02T22:11:00.664019+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for tiff</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2022:2647-2"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2056</id>
    <title>UBUNTU-CVE-2022-2056</title>
    <updated>2026-10-02T22:11:00.664033+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tiff, Ubuntu:Pro:16.04:LTS: tiff, Ubuntu:18.04:LTS: tiff, Ubuntu:20.04:LTS: tiff, Ubuntu:22.04:LTS: tiff</p>
<p>Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2056"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0544</id>
    <title>WID-SEC-W-2022-0544 — libTIFF: Mehrere Schwachstellen ermöglichen Denial of Service</title>
    <updated>2026-10-02T22:11:00.664055+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libTIFF ausnutzen, um einen Denial of Service Angriff durchzuführen.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0544"/>
  </entry>
</feed>
