CVE-2023-3618

Summary

CVE-2023-3618 is a newly disclosed vulnerability affecting the libtiff library. Maliciously crafted TIFF files can cause a segmentation fault in the Fax3Encode function of libtiff/tif_fax3.c, resulting in a denial of service. The issue stems from a buffer overflow in this function when handling specific TIFF files. Successful exploitation of this vulnerability can lead to the crashing of applications using the affected library, disrupting services and potentially causing significant downtime. It is recommended that users update their libtiff installations as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.