CVE-2023-3164

Low

Published: —Translated: 27/07/2026(UTC)NVD NIST

Summary

A heap-buffer-overflow vulnerability was found in LibTIFF in the extractImageSection() function at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801, which can lead to denial of service via a crafted TIFF file.

Risk Assessment

An attacker could exploit this vulnerability to cause application crashes, leading to denial of service.

Recommendation

It is recommended to update LibTIFF to a version containing fixes for this vulnerability and avoid processing untrusted TIFF files.

Original NVD description (English source)

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.