CVE-2023-26965

Summary

CVE-2023-26965 is a vulnerability affecting LibTIFF's tools/tiffcrop.c module up to version 4.5.0. An attacker can exploit this issue by providing a specially crafted TIFF image as input to the loadImage() function. The vulnerability results in a heap-based use after free condition, which an attacker can leverage to execute arbitrary code or cause denial-of-service (DoS) attacks. Successful exploitation may lead to serious consequences, including data theft or system compromise. Users are encouraged to update their LibTIFF installation to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.