LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27.
[
{
"source": "https://gitlab.com/libtiff/libtiff@739dcd28a061738b317c1e9f91029d9cbc157159",
"id": "CVE-2018-5360-080eea7d",
"deprecated": false,
"target": {
"file": "libtiff/tif_dirwrite.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"61569868602208278142543250356083065835",
"171923524337809754821741671617932284290",
"81378857631154961215226172926732042937",
"287415081405752620846504667074555205995",
"110188842041252082907289411813138340834",
"215857215053830936438829670178056166041"
]
}
},
{
"source": "https://gitlab.com/libtiff/libtiff@739dcd28a061738b317c1e9f91029d9cbc157159",
"id": "CVE-2018-5360-274d283f",
"deprecated": false,
"target": {
"file": "libtiff/tif_dir.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"163556274338990316519011545089318416687",
"238038622444975051665130753080447867337",
"61873261279205231678512461018889780688",
"294275126327564873015573283823558383173",
"13668015845256240478618664371273870394"
]
}
},
{
"source": "https://gitlab.com/libtiff/libtiff@739dcd28a061738b317c1e9f91029d9cbc157159",
"id": "CVE-2018-5360-af078396",
"deprecated": false,
"target": {
"function": "_TIFFVSetField",
"file": "libtiff/tif_dir.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 14427.0,
"function_hash": "259479423939519279177470380675914412870"
}
},
{
"source": "https://gitlab.com/libtiff/libtiff@739dcd28a061738b317c1e9f91029d9cbc157159",
"id": "CVE-2018-5360-e5d9e567",
"deprecated": false,
"target": {
"function": "TIFFWriteDirectorySec",
"file": "libtiff/tif_dirwrite.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 15859.0,
"function_hash": "175712132688296538464731449866632895834"
}
}
]