CVE-2023-3316

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-331608.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2023-331617.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-331625.5Microsoft Excel Information Disclosure VulnerabilityCVE-2023-331637.5Windows Network Load Balancing Remote Code Execution VulnerabilityCVE-2023-331646.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331657.5Microsoft SharePoint Server Security Feature Bypass VulnerabilityCVE-2023-331667.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331677.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331687.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-331697.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-33177.1A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sCVE-2023-331708.1ASP.NET and Visual Studio Security Feature Bypass Vulnerability