CVE-2023-3316

5.9

MEDIUMCVSS v3

Published

June 19, 2023

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

libtiff/libtiff

GitLabTIFF Library and Utilities

= 3.9.0, = 4.5.1, >= 3.9.0, < 4.5.1NVD

rzkn/libtiff

GitLab

= 3.9.0, = 4.5.1, >= 3.9.0, < 4.5.1NVD

vadz/libtiff

GitHub

More on this CVE

NVD↗GitHub Advisory↗

OBSOLETE and not updated any more libtiff mirror, see website for the new one

= 3.9.0, = 4.5.1, >= 3.9.0, < 4.5.1NVD

libsdl-org/libtiff

GitHubTIFF decoding library from https://gitlab.com/libtiff/libtiff

= 3.9.0, = 4.5.1, >= 3.9.0, < 4.5.1NVD

Security Advisories

CVE-2023-3316

Description

More on this CVE