CVE-2023-25433

Name of the Vulnerable Software and Affected Versions libtiff version 4.5.0

Description The issue is related to a buffer overflow in the rotateImage() function of the libtiff library. This overflow can cause a heap-buffer-overflow and SEGV. The vulnerability may allow an attacker to cause a denial of service.

Recommendations For libtiff version 4.5.0, as a temporary workaround, consider disabling the rotateImage() function in the tiffcrop tool until a patch is available. Restrict access to the tiffcrop tool to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.