[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fInS0ls9Fo4Z33VKJJrvtdwFKUN3sMgXKTKeHCQw0zX8":3,"g5a-risk:CVE-2022-34266":122},{"success":4,"data":5,"meta":119},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":28,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":51,"references":52,"referencesCount":67,"weaknesses":68,"weaknessesCount":77,"isActivelyExploited":50,"cisaInfo":28,"otxData":28,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":117,"notableEvents":118},"CVE-2022-34266","What is CVE-2022-34266?","The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset() function within TIFFFetchStripThing() in tif_dirread.c. This will cause TIFFFetchStripThing() to segfault after use of an uninitialized resource.","The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerabi...","2022-07-19T20:15:11.367","2025-09-30T13:40:08.03",5.5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":35,"CVSSMetricV2":36,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"cve@mitre.org","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,1.8,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},[],[],0.00253,[37,37,37,37,37,37,37],"Medium",[41,45],{"vendor":42,"product":42,"version":43,"criteria":44,"vulnerable":4},"libtiff","4.0.3-35","cpe:2.3:a:libtiff:libtiff:4.0.3-35:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":50},"amazon","amazon_linux","-","cpe:2.3:o:amazon:amazon_linux:-:*:*:*:*:*:*:*",false,2,[53,59,63,65],{"url":54,"source":55,"tags":56},"https:\u002F\u002Falas.aws.amazon.com\u002FAL2\u002FALAS-2022-1814.html","Amazon",[57,58],"Mitigation","Third Party Advisory",{"url":60,"source":61,"tags":62},"https:\u002F\u002Fbugs.gentoo.org\u002F859433","Gentoo",[58],{"url":54,"source":55,"tags":64},[57,58],{"url":60,"source":61,"tags":66},[58],4,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete","Base","Simple",1,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2022-34266? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-34266, a medium severity cyber security vulnerability from 2022. The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Ama...","CVE-2022-34266, CVE-2022-34266 vulnerability, CVE-2022-34266 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, libtiff security, amazon security, libtiff vulnerability, amazon_linux vulnerability","\u002Fwhat-is\u002Fcve-2022-34266",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-34266","Cybersecurity","CVE-2022-34266, CVE-2022-34266 vulnerability, CVE-2022-34266 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":106,"Negate":28,"Nodes":107},"AND",[108,113],{"Operator":109,"Negate":50,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":112,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"644FF49C-2E9A-4B07-B8E7-2E1F556CFA8E",{"Operator":109,"Negate":50,"CPEMatch":114},[115],{"Vulnerable":50,"Criteria":49,"MatchCriteriaID":116,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C8699C74-BF90-4CF8-9285-32576DB1FE2B",[],[],{"lastModified":11,"cacheTime":120,"version":121},1793196822893,"2.0",{"score":123,"band":124,"action":125,"scoredAt":126},20,"Low","Monitor","2026-07-01T10:28:40.144749+00:00"]