CVE-2023-26966

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be bi...

Original description

The description as published by the source.

libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

BellSoft Alpaquita BELL-CVE-2023-26966 tiff
Debian DEBIAN-CVE-2023-26966 tiff Fixed in: 4.2.0-1+deb11u6

References

advisory github.com
advisory nvd.nist.gov
patch gitlab.com
report gitlab.com
web lists.debian.org
web lists.debian.org