CVE-2023-3316: Libtiff

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

Affected products

• Libtiff Libtiff: from 3.9.0, before 4.5.1 (fixed in 4.5.1)

Published 2023-06-19. Last modified 2026-06-17.