Lucene search

RedhatCVELIST:CVE-2023-40745

HistoryOct 05, 2023 - 6:55 p.m.

CVE-2023-40745 Libtiff: integer overflow in tiffcp.c

2023-10-0518:55:26

CWE-190

redhat

raw.githubusercontent.com

libtiff

integer overflow

tiffcp.c

denial of service

remote attackers

buffer overflow

heap-based

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.7%

JSON

LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.