CVE-2023-1560

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1560
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1560.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1560
Published
2023-03-22T12:15:10.670Z
Modified
2026-03-15T22:45:46.425024Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader.c of the component File Handler. The manipulation leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223553 was assigned to this vulnerability.

References

Affected packages

Git / github.com/jkriege2/tinytiff

Affected ranges

Type
GIT
Repo
https://github.com/jkriege2/tinytiff
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a826a0adcdecb7c968924b5a443861d57487fcac
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0.0"
        }
    ]
}

Affected versions

1.*
1.0.0.0
2.*
2.0.0.0
3.*
3.0.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1560.json"