CVE-2023-3164 Heap-buffer-overflow in extractimagesection()
Attackers can cause a denial of service in applications using LibTIFF by providing a crafted TIFF file that triggers a heap-buffer-overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2023-3164?
CVE-2023-3164 is a medium-severity memory corruption vulnerability in Libtiff Libtiff, published on 2 Nov 2023. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw allows attackers to cause a denial of service via a crafted tiff file.
Which versions are affected by CVE-2023-3164?
It affects 2 products.
Linux distribution packages (14)
tiff SUSE:Linux Enterprise Micro 5.2 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Micro 5.3 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Micro 5.4 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Micro 5.5 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Micro 5.5 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Module for Package Hub 15 SP5 | All versions | 4.0.9-150000.45.44.1 |
tiff SUSE:Linux Enterprise Server 12 SP5 | All versions | 4.0.9-44.83.1 |
tiff SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 4.0.9-44.83.1 |
tiff SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 4.0.9-44.83.1 |
tiff openSUSE:Leap 15.5 | All versions | 4.0.9-150000.45.44.1 |
tiff openSUSE:Leap Micro 5.3 | All versions | 4.0.9-150000.45.44.1 |
tiff openSUSE:Leap Micro 5.4 | All versions | 4.0.9-150000.45.44.1 |
Products include Libtiff Libtiff, Redhat Enterprise Linux.
How do I fix CVE-2023-3164?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2023-3164 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-3164 exists.
Other vulnerabilities in Libtiff Libtiff
Sources
Also known as AZL-31765, AZL-34952, DEBIAN-CVE-2023-3164, ECHO-cc50-4ed5-0244, GHSA-2x8c-h7r9-r6m6, JLSEC-2025-314 and 7 more.