PT-2023-6797

CVE-2023-41175

·

Published

2023-07-17

·

Updated

2025-11-25

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)
Description A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2024:2289
ALT-PU-2025-7185
ALT-PU-2025-7532
ALT-PU-2025-8255
AZL-31097
DLA-3513-1
DSA-5567-1
INFSA-2024_2289
JLSEC-2025-313
MGASA-2024-0077
RHSA-2024:2289
RHSA-2024_2289
ROSA-SA-2025-2627
SUSE-SU-2024:0915-1
SUSE-SU-2024:0973-1
Found an issue in the description? Have something to add? Feel free to write us 👾