loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0... · CVE-2023-26965 · GitHub Advisory Database · GitHub

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0...

Moderate severity Unreviewed Published Jun 14, 2023 to the GitHub Advisory Database • Updated Apr 11, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

References

Published by the National Vulnerability Database

Jun 14, 2023

Published to the GitHub Advisory Database Jun 14, 2023

Last updated Apr 11, 2024