CVE-2023-0801

Name of the Vulnerable Software and Affected Versions libtiff version 4.4.0

Description The issue is related to an out-of-bounds write in the tiffcrop utility of the libtiff library, specifically in the files libtiff/tif unix.c:368, tools/tiffcrop.c:2903, and tools/tiffcrop.c:6778. This can be exploited by attackers to cause a denial-of-service via a crafted tiff file.

Recommendations For version 4.4.0, users who compile libtiff from sources can apply the fix available with commit 33aee127. As a temporary workaround, consider restricting the use of the tiffcrop utility until the issue is resolved.