CVE-2023-2731

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-05-17 · updated 2026-06-17
Weakness: CWE-476

Description

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.

Affected products

Fedoraproject Fedora: 38
libtiff: before 4.5.0 — fixed in 4.5.0
Red Hat Enterprise Linux: 9.0

How to fix

Upgrade to a fixed version: libtiff 4.5.0. Check the vendor advisory for mitigations.

References

https://access.redhat.com/security/cve/CVE-2023-2731
https://bugzilla.redhat.com/show_bug.cgi?id=2207635
https://github.com/libsdl-org/libtiff/commit/9be22b639ea69e102d3847dca4c53ef025e9527b
https://gitlab.com/libtiff/libtiff/-/issues/548
https://security.netapp.com/advisory/ntap-20230703-0009/
https://access.redhat.com/security/cve/CVE-2023-2731
https://bugzilla.redhat.com/show_bug.cgi?id=2207635
https://github.com/libsdl-org/libtiff/commit/9be22b639ea69e102d3847dca4c53ef025e9527b
https://gitlab.com/libtiff/libtiff/-/issues/548
https://security.netapp.com/advisory/ntap-20230703-0009/

Get alerted when CVE-2023-2731 or the next vulnerability affects your stack