6.1Mittel
CVE-2023-1916
Beschreibung
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
Schwachstellentyp (CWE):
CWE-125
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://gitlab.com/libtiff/libtiff/-/issues/536%2C
- https://gitlab.com/libtiff/libtiff/-/issues/537 ExploitIssue Tracking
- https://support.apple.com/kb/HT213844
- https://gitlab.com/libtiff/libtiff/-/issues/536 ExploitIssue Tracking
CPE-Treffer (NVD) (1)
cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*≥ 4.0 ≤ 4.5.0