Lucene search

RedhatCVELIST:CVE-2023-6277

HistoryNov 24, 2023 - 6:20 p.m.

CVE-2023-6277 Libtiff: out-of-memory in tiffopen via a craft file

2023-11-2418:20:16

CWE-400

redhat

raw.githubusercontent.com

cve-2023-6277

libtiff

denial of service

craft file

out-of-memory

tiffopen

6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.5%

JSON

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.