Skip to content
Not rated

CVE-2023-1916 A flaw was found in tiffcrop, a program distributed by the libtiff package

Description

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

Affected products and versions

Product Affected versions Fixed in
libtiff Versions not published

References

Timeline

  1. Published
  2. Last modified
The 27 CVEs of libtiff →
Track this CVE