CVE-2022-3570

Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

• CWE-787
• CWE-787

• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.jsonThird Party Advisory, VDB Entry
• https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094cPatch
• https://gitlab.com/libtiff/libtiff/-/issues/381Exploit, Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/-/issues/386Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00018.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230203-0002/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5333Third Party Advisory
• https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-3570.jsonThird Party Advisory, VDB Entry
• https://gitlab.com/libtiff/libtiff/-/commit/bd94a9b383d8755a27b5a1bc27660b8ad10b094cPatch
• https://gitlab.com/libtiff/libtiff/-/issues/381Exploit, Issue Tracking, Patch, Third Party Advisory
• https://gitlab.com/libtiff/libtiff/-/issues/386Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/01/msg00018.htmlMailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230203-0002/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5333Third Party Advisory

Published

Oct 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35694Adobe Experience Manager version 6.5.14 (and earlier) is aff…5.4
• CVE-2022-35695Adobe Experience Manager version 6.5.14 (and earlier) is aff…5.4
• CVE-2022-35696Adobe Experience Manager version 6.5.14 (and earlier) is aff…5.4
• CVE-2022-35697Adobe Experience Manager Core Components version 2.20.6 (and…5.4
• CVE-2022-35698Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (an…5.4
• CVE-2022-35699Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35700Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35701Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35702Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35703Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35704Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8
• CVE-2022-35705Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and ea…7.8