CVE search · CVE-2023-30775

CVE-2023-30775

medium 5.5

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

Open in the NVD CVE.org JSON

Status: Modified
Published: 2023-05-19
Last changed: 2026-06-17
Source: secalert@redhat.com
Weakness: CWE-119, CWE-787

Severity

Version	Score	Vector	Source
CVSS 3.1	medium 5.5	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H`	nvd@nist.govPrimary
CVSS 3.1	medium 5.5	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`	134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

libtiff · libtiff

References

https://access.redhat.com/security/cve/CVE-2023-30775Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2187141Issue TrackingThird Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/464Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0002/
https://access.redhat.com/security/cve/CVE-2023-30775Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2187141Issue TrackingThird Party Advisory
https://gitlab.com/libtiff/libtiff/-/issues/464Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0002/