PT-2023-6797
CVE-2023-41175
·
Published
2023-07-17
·
Updated
2025-11-25
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
libtiff (affected versions not specified)
Description
A vulnerability was found in libtiff due to multiple potential integer overflows in
raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾