CVE-2023-3164

Name of the Vulnerable Software and Affected Versions LibTIFF versions prior to the fixed version

Description A heap-buffer-overflow vulnerability was found in LibTIFF, specifically in the extractImageSection() function at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file. The vulnerability is related to buffer copying without input size checking, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For LibTIFF versions prior to the fixed version, consider disabling the extractImageSection() function until a patch is available to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.