cve/2010/CVE-2010-2443.md

CVE-2010-2443

Description

The OJPEGReadBufferFill function in tif_ojpeg.c in LibTIFF before 3.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an OJPEG image with undefined strip offsets, related to the TIFFVGetField function.

POC

Reference

No PoCs from references.

Github

• https://github.com/Hwangtaewon/radamsa
• https://github.com/JulianDavis/radamsa
• https://github.com/StephenHaruna/RADAMSA
• https://github.com/marcostolosa/radamsa
• https://github.com/nqwang/radamsa
• https://github.com/sambacha/mirror-radamsa
• https://github.com/sunzu94/radamsa-Fuzzer
• https://github.com/vnc0/radamsa-ios