CVE-2023-3618: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

July 12, 2023 (updated November 7, 2023)

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_fax3.c, resulting in a denial of service.

References

access.redhat.com/security/cve/CVE-2023-3618
bugzilla.redhat.com/show_bug.cgi?id=2215865
gitlab.com/libtiff/libtiff/-/commit/8a4f6b587be4fa7bb39fe17f5f9dec52182ab26e
nvd.nist.gov/vuln/detail/CVE-2023-3618

Code Behaviors & Features

Detect and mitigate CVE-2023-3618 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →