PT-2023-3450 · Libtiff+5 · Libtiff+5

Sandipan Roy · Published 2023-04-17 · Updated 2025-06-26 · CVE-2023-30775

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libtiff (affected versions not specified)

Description A security flaw in the libtiff library causes a heap buffer overflow in the extractContigSamples32bits() function, located in tiffcrop.c. This issue can be exploited by an attacker using specially crafted data, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-787

CWE-122

Related Identifiers

ALSA-2023:2340

ALT-PU-2025-7185

ALT-PU-2025-7532

ALT-PU-2025-8255

BDU:2023-03633

CVE-2023-30775

RHSA-2023:2340

RHSA-2023_2340

Affected Products

Alt Linux

Almalinux

Debian

Red Hat

Red Os

Libtiff

References · 256

• https://safe-surf.ru/specialists/bulletins-nkcki/705230 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4645 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1210 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2519 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1916 · Security Note
• https://bdu.fstec.ru/vul/2022-05726 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25433 · Security Note
• https://bdu.fstec.ru/vul/2023-05407 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-30775 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05398 · Security Note
• https://bdu.fstec.ru/vul/2023-05415 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34526 · Security Note
• https://bdu.fstec.ru/vul/2023-05979 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52356 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-30775 · Security Note