CVE-2023-6228Low· 3.3▾ SunlitAn issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on processing may cause a heap-based buffer overflow leads to an application crash.
libtiff (all versions)libtiff (all versions)libtiffcompat-libtiff3libtiffcompat-libtiff3 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-52355High· 7.5An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API
CVE-2026-120831Medium· 6.5Libslirp: libslirp: queue pointer corruption in if_output() leading to denial of service
CVE-2024-7006High· 7.5Libtiff: null pointer dereference in tif_dirinfo.c
CVE-2023-6277Medium· 6.5Libtiff: out-of-memory in tiffopen via a craft file
CVE-2026-119777High· 8.8Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser
CVE-2023-1916NoneA flaw was found in tiffcrop, a program distributed by the libtiff package