CVE-2023-41175

Summary

CVE-2023-41175 is a newly discovered vulnerability affecting the libtiff library. The issue stems from multiple integer overflows in the raw2tiff.c file. These overflows can be exploited by remote attackers, leading to a denial-of-service condition or potentially executing arbitrary code. The vulnerability is triggered by a specially crafted TIFF image that causes a heap-based buffer overflow.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.