CVE-2023-3164

Summary

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.

Affected Software

Weaknesses

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CVE Program Container

Additional References

• https://access.redhat.com/security/cve/CVE-2023-3164
• https://bugzilla.redhat.com/show_bug.cgi?id=2213531
• https://gitlab.com/libtiff/libtiff/-/issues/542

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://access.redhat.com/security/cve/CVE-2023-3164
• https://bugzilla.redhat.com/show_bug.cgi?id=2213531
• https://gitlab.com/libtiff/libtiff/-/issues/542

• ←Previous
• Next→