Out-of-Bounds Read Vulnerability in LibTIFF Affects Multiple Versions

CVE-2023-0796

What is CVE-2023-0796?

LibTIFF version 4.4.0 is susceptible to an out-of-bounds read vulnerability found in the tiffcrop tool, located in tools/tiffcrop.c at line 3592. This flaw can be exploited by attackers via specially crafted TIFF files, potentially leading to denial-of-service conditions. Users compiling LibTIFF from source can mitigate the issue by applying the fix available in commit afaabc3e.

References