CVE-2023-2731

Published May 17th, 2023

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.

libtiff/libtiff

TIFF Library and Utilities

GitLab

libsdl-org/libtiff

TIFF decoding library from https://gitlab.com/libtiff/libtiff

GitHub