CVE-2010-2443

CVE-2010-2443 describes a denial-of-service vulnerability in LibTIFF versions prior to 3.9.3, specifically within the OJPEGReadBufferFill function, affecting applications that process OJPEG images. An attacker can trigger a NULL pointer dereference and application crash by providing a crafted OJPEG image with undefined strip offsets. With a CVSS score of 5.0 (medium severity), this vulnerability is easily exploitable over a network with low attack complexity, leading to a denial of service. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.