CVE-2023-3164

5.5

MEDIUMCVSS v3

Published

November 2, 2023

Affected

4 projects

Assigned by

Red Hat

Severity scale

010

Description

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.

libtiff/libtiff

GitLabTIFF Library and Utilities

= -, < 4.6.0NVD

rzkn/libtiff

GitLab

= -, < 4.6.0NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= -, < 4.6.0NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= -, < 4.6.0NVD

Security Advisories

CVE-2023-3164

Description

More on this CVE