CVE-2023-0798

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0

Description The issue is related to an out-of-bounds read in the tiffcrop function in tools/tiffcrop.c at line 3400, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. The extractContigSamplesShifted8bits() function is also associated with this buffer read issue, potentially leading to a denial-of-service.

Recommendations For LibTIFF version 4.4.0, users who compile libtiff from sources can apply the fix available with commit afaabc3e.