CVE-2023-0795

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0

Description The issue is related to an out-of-bounds read in the tiffcrop utility of the libtiff library, which can be exploited to cause a denial-of-service via a crafted tiff file.

Recommendations For version 4.4.0, users who compile libtiff from sources can apply the fix available with commit afaabc3e.