CVE-2023-0804

CVE-2023-0804 affects LibTIFF 4.4.0 with an out-of-bounds write in tiffcrop (tools/tiffcrop.c), enabling denial-of-service via a crafted TIFF. The issue is tied to the tiffcrop implementation and is addressed by the patch committed as 33aee1275d9d1384791d2206776eb8152d397f00. Connected sources co...

CVE-2023-0797

LibTIFF 4.4.0 contains an out-of-bounds read in tiffcrop (libtiff/tif_unix.c:368) invoked by tools/tiffcrop.c, allowing denial-of-service via a crafted TIFF file. The CVE is CVE-2023-0797. The connected sources confirm the vulnerability and note that a fix is available in commit afaabc3e; systems...

CVE-2023-0796: Out-of-bounds Read

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0795

Summary (CVE-2023-0795, LibTIFF): LibTIFF 4.4.0 is affected by an out-of-bounds read in tiffcrop (tools/tiffcrop.c:3488; other lines cited in connected advisories), enabling denial-of-service via crafted TIFF files. The root cause is an out-of-bounds read/write in tiffcrop-related code paths, lea...

CVE-2023-0801

CVE-2023-0801 affects LibTIFF 4.4.0, involving an out-of-bounds write in tiffcrop via _TIFFmemcpy() invoked from tools/tiffcrop.c and libtiff/tif_unix.c:368. The issue is triggered during TIFF processing by crafted files, enabling denial-of-service. The problem is fixed in the upstream commit 33a...

CVE-2023-0803

CVE-2023-0803 affects LibTIFF 4.4.0 and its tiffcrop tool. The vulnerability is an out-of-bounds write in tools/tiffcrop.c (line 3516 in the initial description; other sources reference related offsets) that can cause a denial-of-service when processing crafted TIFF files. The root cause is an im...

CVE-2023-0798

CVE-2023-0798 affects LibTIFF 4.4.0 via an out-of-bounds read in tiffcrop (tools/tiffcrop.c:3400), enabling denial-of-service with a crafted TIFF file. The issue is documented across multiple advisories (including ALAS/ALAS2/ALMA and Debian advisories) and is linked to the same root cause describ...

CVE-2023-0800

CVE-2023-0800 affects LibTIFF 4.4.0. There is an out-of-bounds write in tiffcrop.c at line 3502, exploitable via a crafted TIFF file to cause a denial-of-service. The fix is available in the commit 33aee127 for those building LibTIFF from source. Connected advisories consistently reference this C...

PT-2023-5351

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.4.0 Description The issue is related to an out-of-bounds read in the tiffcrop function in tools/tiffcrop.c at line 3400, which can be exploited by attackers to cause a denial-of-service via a crafted tiff file. The...

CVE-2023-0797

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tifunix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0796

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0804

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

CVE-2023-0802: Out-of-bounds Write

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for processing TIFF files. libTIFF suffers from an out-of-bounds write vulnerability that stems from a boundary error in tiffcrop at libtiff/tifunix.c:368 when...

CVE-2023-0795

LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit afaabc3e...

CVE-2023-0802

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 33aee127...