CVE-2023-29408

Summary

CVE-2023-29408 is a vulnerability affecting the TIFF decoder. The issue arises from a lack of size limitation on compressed tile data. An adversary can craft a malicious TIFF image, which appears small in terms of pixels and encoded size. However, this deceptive image can force the decoder to process large amounts of compressed data, resulting in excessive memory and CPU consumption.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.