CVE-2014-8130

CVE-2014-8130 describes a denial-of-service vulnerability in LibTIFF 4.0.3, specifically within the _TIFFmalloc function, which fails to reject zero-sized allocations. This flaw allows remote attackers to trigger a divide-by-zero error and application crash by providing a specially crafted TIFF image, impacting products from Apple and Red Hat that utilize LibTIFF. The vulnerability has a CVSS score of 6.5 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and primarily leading to high availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB, and it has received minimal community discussion or media coverage.