CVE-2023-25435

Name of the Vulnerable Software and Affected Versions libtiff version 4.5.0

Description The issue is caused by a buffer overflow on the stack in the extractContigSamplesShifted8bits() function of the LibTIFF library, located in /libtiff/tools/tiffcrop.c. This can allow an attacker to cause a denial of service. The function extractContigSamplesShifted8bits() is specifically vulnerable at line 3753 of the tiffcrop.c file.

Recommendations For libtiff version 4.5.0, consider disabling the extractContigSamplesShifted8bits() function as a temporary workaround until a patch is available. Restrict access to the tiffcrop.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.