CVE-2024-7006

Medium

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This may allow an attacker to trigger memory allocation failures, causing a segmentation fault and application crash.

Risk Assessment

An attacker can crash applications using Libtiff, leading to denial of service (DoS).

Recommendation

Update Libtiff to a patched version that fixes this vulnerability.

Original NVD description (English source)

A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`. This issue may allow an attacker to trigger memory allocation failures through certain means, such as restricting the heap space size or injecting faults, causing a segmentation fault. This can cause an application crash, even