๐Ÿ” CVE Alert

CVE-2023-1916

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

CWE CWE-125
Vendor n/a
Product libtiff
Published Apr 10, 2023
Last Updated Aug 2, 2024
Stay Ahead of the Next One

Get instant alerts for n/a libtiff

Be the first to know when new unknown vulnerabilities affecting n/a libtiff are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

n/a / libtiff
libtiff versions 4.x and newer are affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
gitlab.com: https://gitlab.com/libtiff/libtiff/-/issues/536%2C gitlab.com: https://gitlab.com/libtiff/libtiff/-/issues/537 support.apple.com: https://support.apple.com/kb/HT213844