CVE-2023-30086

MediumCVSS 5.5

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

A buffer overflow vulnerability was found in Libtiff version 4.0.7. A local attacker can exploit the tiffcp function in tiffcp.c to cause a denial of service (DoS).

Risk Assessment

The risk involves potential disruption of applications using Libtiff by a local user, leading to service unavailability.

Recommendation

It is recommended to update Libtiff to the latest version that includes a fix for this vulnerability. Local system access should also be restricted.

Original NVD description (English source)

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.