CVE-2023-3618
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
A flaw was found in libtiff that can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function. A specially crafted TIFF file can cause a denial of service.
Risk Assessment
This vulnerability can lead to denial of service, affecting the availability of applications using libtiff. Organizations may experience downtime in their systems.
Recommendation
It is recommended to update the libtiff library to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for potential attacks exploiting this flaw.
Original NVD description (English source)
A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.