CVE Catalog

CVE-2023-3316

MediumCVSS 5.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.02%

59th percentile - higher than 59% of all known CVEs

Summary

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file, which may occur due to a non-existent path or a path requiring permissions, such as /dev/null, while specifying zones.

Risk Assessment

This vulnerability may lead to application crashes, potentially affecting the availability of services within the organization.

Recommendation

It is recommended to check and correct output file paths and ensure appropriate permissions for opening them.

Original NVD description (English source)

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS