CVE-2022-1210

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.

• CWE-400
• CWE-404

• https://gitlab.com/libtiff/libtiff/-/issues/402Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiffThird Party Advisory
• https://security.gentoo.org/glsa/202210-10Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220513-0005/Third Party Advisory
• https://vuldb.com/?id.196363Third Party Advisory
• https://gitlab.com/libtiff/libtiff/-/issues/402Exploit, Issue Tracking, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiffThird Party Advisory
• https://security.gentoo.org/glsa/202210-10Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220513-0005/Third Party Advisory
• https://vuldb.com/?id.196363Third Party Advisory

Published

Apr 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1204A use-after-free flaw was found in the Linux kernel’s Amateu…5.5
• CVE-2022-1205A NULL pointer dereference flaw was found in the Linux kerne…4.7
• CVE-2022-1206The AdRotate Banner Manager – The only ad manager you'll nee…7.2
• CVE-2022-1207Out-of-bounds read in GitHub repository radareorg/radare2 pr…6.6
• CVE-2022-1208The Ultimate Member plugin for WordPress is vulnerable to St…5.4
• CVE-2022-1209The Ultimate Member plugin for WordPress is vulnerable to ar…5.4
• CVE-2022-1211A vulnerability classified as critical has been found in til…6.5
• CVE-2022-1212Use-After-Free in str_escape in mruby/mruby in GitHub reposi…9.8
• CVE-2022-1213SSRF filter bypass port 80, 433 in GitHub repository livehel…8.1
• CVE-2022-1214Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2022-1215A format string vulnerability was found in libinput7.8
• CVE-2022-1216The Advanced Image Sitemap WordPress plugin through 1.2 does…6.1