CVE-2023-3195
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service.
Risk Assessment
This vulnerability can lead to application crashes, resulting in denial of service for users. An attacker may exploit this vulnerability to disrupt system operations.
Recommendation
It is recommended to update ImageMagick to the latest version to mitigate this vulnerability. Additionally, avoid opening TIFF files from untrusted sources.
Original NVD description (English source)
A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service.