CVE-2023-3316

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v3.1

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

1.12% chance of exploitation in the next 30 days, 64th percentile

Published

2023-06-19

Updated

2025-11-03

Proof-of-concept exploits (1)

• https://research.jfrog.com/vulnerabilities/libtiff-nullderef-dos-xray-522144/

References

• CVE Record
• NVD entry

Related

• CVE-2023-33148
• CVE-2023-33177
• CVE-2023-33145
• CVE-2023-3318
• CVE-2023-33140
• CVE-2023-33185