Automated analysis has detected that the following third party packages have had vulnerabilities publicly reported.
NOTE: There may be several bugs listed below - in almost all cases, all bugs can be quickly addressed by upgrading to the latest version of the package.
Package Name: media-libs/tiff
Package Version: [cpe:/a:libtiff:libtiff:4.0.9 cpe:/a:libtiff_project:libtiff:4.0.9]
Advisory: CVE-2018-10963
Details: https://vomit.googleplex.com/advisory?id=CVE/CVE-2018-10963
CVSS severity score: 4.3/10.0
Confidence: high
Description:
The TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service (assertion failure and application crash) via a crafted file, a different vulnerability than CVE-2017-13726.
Comment 1 by mnissler@chromium.org
, Jun 19 2018