QwikSec

Security Database

CVE

CWE

Training

CVE-2023-1916

Published: Apr 10, 2023

Modified: Aug 2, 2024

PUBLISHED

Description

A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.

Vendor	Product	Versions
n/a	libtiff	affected `libtiff versions 4.x and newer are affected`

Weaknesses (CWE)

References

https://gitlab.com/libtiff/libtiff/-/issues/536%2C

https://gitlab.com/libtiff/libtiff/-/issues/537

https://support.apple.com/kb/HT213844

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.