CVE-2023-1916
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the ext...
Original description
The description as published by the source.
A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2023-1916 tiff
- Debian DEBIAN-CVE-2023-1916 tiff
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com
- report gitlab.com
- report gitlab.com
- web support.apple.com