CVE-2022-3970 LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow
An integer overflow in LibTIFF allows remote attackers to cause denial of service or potentially execute code via crafted TIFF images.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-3970?
CVE-2022-3970 is a medium-severity vulnerability in Apple Ipados, published on 13 Nov 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.
Weakness: CWE-189
Which versions are affected by CVE-2022-3970?
It affects 7 products.
Products include Apple Ipados, Apple Iphone Os, Apple Macos, Apple Safari, Debian Debian Linux, Libtiff Libtiff and 1 more.
How do I fix CVE-2022-3970?
Apply the vendor's patch.
Is CVE-2022-3970 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-3970 exists.
Other vulnerabilities in Apple Ipados
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write
- CVE-2025-24085 Apple Multiple Products Use-After-Free
- CVE-2025-31200 Apple Multiple Products Memory Corruption
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write
Sources
Also known as ALPINE-CVE-2022-3970, AZL-11449, DEBIAN-CVE-2022-3970, GHSA-44v9-23w3-fv66, JLSEC-2025-288, MGASA-2022-0448 and 4 more.