{"id":"CVE-2023-40745","aliases":["ALSA-2024:2289","AZL-31096","BELL-CVE-2023-40745","CLSA-2025-1745531344","DEBIAN-CVE-2023-40745","DLA-3513-1","DSA-5567-1","EUVD-2023-45298","GHSA-w737-xjxg-h9mw","JLSEC-2025-312","MGASA-2024-0077","RHSA-2024:2289","SUSE-SU-2024:0915-1","SUSE-SU-2024:0973-1","UBUNTU-CVE-2023-40745"],"status":"published","title":"Libtiff: integer overflow in tiffcp.c","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01411,"percentile":0.72874,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2023-07-31T00:00:00Z","modified":"2026-10-29T11:31:09Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libtiff","fixed_in":["4.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"tiff","fixed_in":["4.5.0-6+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tiff","fixed_in":["4.5.1+git230720-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tiff","fixed_in":["4.5.1+git230720-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Libtiff_jll","fixed_in":["4.6.0+0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Azure Linux:2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-8.el9_2.tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u1"}]}],"versions":["4.5.0-6"]},{"source":"osv","ecosystem":"Debian:13","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1+git230720-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1+git230720-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0+git191117-2~deb10u8"}]}],"versions":["4.0.10+git190814-1","4.0.10+git190818-1","4.0.10+git190903-1","4.0.10+git191003-1","4.0.10-4","4.1.0+git191117-1","4.1.0+git191117-2~deb10u1","4.1.0+git191117-2~deb10u2","4.1.0+git191117-2~deb10u3","4.1.0+git191117-2~deb10u4","4.1.0+git191117-2~deb10u5","4.1.0+git191117-2~deb10u6","4.1.0+git191117-2~deb10u7","4.1.0-1"],"bundled":8},{"source":"osv","ecosystem":"Debian:11","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.0-1+deb11u5"}]}],"versions":["4.2.0-1","4.2.0-1+deb11u1","4.2.0-1+deb11u2","4.2.0-1+deb11u3","4.2.0-1+deb11u4"],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-6+deb12u1"}]}],"versions":["4.5.0-6"],"bundled":3},{"source":"osv","ecosystem":"Julia","package":"Libtiff_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.6.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.2.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libtiff-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-12.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-44.80.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"tiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.9-150000.45.41.1"}]}],"bundled":3}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"libtiff","product":"libtiff"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:2289","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40745","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","report","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235265","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231110-0005/","tags":["x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40745","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20231110-0005"},{"url":"https://github.com/advisories/GHSA-w737-xjxg-h9mw"},{"url":"https://access.redhat.com/security/cve/CVE-2022-40090","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3618","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41175","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6228","tags":["report"]},{"url":"https://bugzilla.redhat.com/2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/2235265","tags":["report"]},{"url":"https://bugzilla.redhat.com/2240995","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2289.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-40745","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745531344.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40745.json","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-40745","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0077.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32983","tags":["report"]},{"url":"https://lwn.net/Articles/965827/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2235264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240995","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2289.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40090","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40090","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3618","tags":["advisory"]},{"url":"https://gitlab.com/libtiff/libtiff/-/issues/529","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6228","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6228","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40745","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41175","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240915-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213590","tags":["report"]},{"url":"https://bugzilla.suse.com/1214686","tags":["report"]},{"url":"https://bugzilla.suse.com/1214687","tags":["report"]},{"url":"https://bugzilla.suse.com/1221187","tags":["report"]},{"url":"https://bugzilla.suse.com/960589","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-40745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41175","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240973-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-40745","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-40745","title":"Libtiff: integer overflow in tiffcp.c","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T18:55:26.192Z","modified":"2026-01-22T15:42:32.593Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:21.971258Z"}],"euvd":[{"id":"EUVD-2023-45298","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T18:55:26Z","modified":"2026-01-22T15:42:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:48.575559Z"}],"ghsa":[{"id":"GHSA-w737-xjxg-h9mw","title":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial...","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T21:30:46Z","modified":"2024-05-10T05:03:23Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:57:20.80512Z"}],"nvd":[{"id":"CVE-2023-40745","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T19:15:11.26Z","modified":"2026-06-17T06:19:19.433Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:08:35.022405Z"}],"osv":[{"id":"AZL-31096","title":"CVE-2023-40745 affecting package libtiff for versions less than 4.6.0-1","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T19:15:11Z","modified":"2026-04-21T04:26:04.919862Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"BELL-CVE-2023-40745","status":"published","published":"2023-10-05T19:15:00Z","modified":"2026-09-04T07:15:23.487535134Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-40745","title":"Libtiff: integer overflow in tiffcp.c","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T18:55:26.192Z","modified":"2026-10-28T02:31:12.343878689Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-40745","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2023-10-05T19:15:11.26Z","modified":"2026-10-26T18:02:32.467916Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"JLSEC-2025-312","title":"LibTIFF is vulnerable to an integer overflow","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"published","published":"2025-11-25T22:18:43.603Z","modified":"2026-07-18T00:01:16.960305144Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2024:2289","title":"Red Hat Security Advisory: libtiff security update","status":"published","published":"2024-09-16T16:53:08Z","modified":"2026-07-03T10:05:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-40745","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow.","status":"withdrawn","published":"2023-10-05T19:15:00Z","modified":"2025-07-16T07:20:45.773365Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:2289","title":"Moderate: libtiff security update","description":"The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.\n\nSecurity Fix(es):\n\n* libtiff: infinite loop via a crafted TIFF file (CVE-2022-40090)\n* libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c (CVE-2023-3618)\n* libtiff: integer overflow in tiffcp.c (CVE-2023-40745)\n* libtiff: potential integer overflow in raw2tiff.c (CVE-2023-41175)\n* libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c (CVE-2023-6228)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:09.234769659Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1745531344","title":"libtiff: Fix of 2 CVEs","description":"- CVE-2023-40745: prevent integer overflow on hostile images to avoid heap-based buffer\n  overflow and potential code execution\n- CVE-2023-41175: address integer overflows and bypass in raw2tiff.c to prevent heap-based\n  buffer overflow and potential code execution","status":"published","published":"2025-04-24T21:49:09Z","modified":"2026-06-01T00:30:21.11215827Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-3513-1","title":"tiff - security update","status":"published","published":"2023-07-31T00:00:00Z","modified":"2026-03-09T01:21:57.84129Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5567-1","title":"tiff - security update","status":"published","published":"2023-11-27T00:00:00Z","modified":"2026-03-09T02:10:39.427061Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0077","title":"Updated libtiff packages fix security vulnerabilities","description":"LibTIFF is vulnerable to an integer overflow. This flaw allows remote\nattackers to cause a denial of service (application crash) or possibly\nexecute an arbitrary code via a crafted tiff image, which triggers a\nheap-based buffer overflow. (CVE-2023-40745)\nA vulnerability was found in libtiff due to multiple potential integer\noverflows in raw2tiff.c. This flaw allows remote attackers to cause a\ndenial of service or possibly execute an arbitrary code via a crafted\ntiff image, which triggers a heap-based buffer overflow.\n(CVE-2023-41175)\n","status":"published","published":"2024-03-20T21:19:08Z","modified":"2026-04-16T04:42:01.372704872Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2024:0915-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).\n- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).\n- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).\n- CVE-2015-8668: Fixed Heap-based buffer overflow in bmp2tiff / PackBitsEncode (bsc#960589).\n","status":"published","published":"2024-03-18T07:52:15Z","modified":"2026-02-04T02:39:51.645664Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0973-1","title":"Security update for tiff","description":"This update for tiff fixes the following issues:\n\n- CVE-2023-41175: Fixed potential integer overflow in raw2tiff.c (bsc#1214686).\n- CVE-2023-38288: Fixed potential integer overflow in raw2tiff.c (bsc#1213590).\n- CVE-2023-40745: Fixed integer overflow in tiffcp.c (bsc#1214687).\n","status":"published","published":"2024-03-22T10:23:20Z","modified":"2026-02-04T03:51:58.076797Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}