CVE-2023-25433

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop c...

Original description

The description as published by the source.

libtiff 4.5.0 is vulnerable to Buffer Overflow via /libtiff/tools/tiffcrop.c:8499. Incorrect updating of buffer size after rotateImage() in tiffcrop cause heap-buffer-overflow and SEGV.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

BellSoft Alpaquita BELL-CVE-2023-25433 tiff
Debian DEBIAN-CVE-2023-25433 tiff Fixed in: 4.2.0-1+deb11u6

References

advisory github.com
advisory nvd.nist.gov
patch gitlab.com
report gitlab.com
web lists.debian.org
web lists.debian.org