Unrated severityNVD Advisory· Published Sep 10, 2013· Updated Jun 16, 2026

CVE-2013-4232

Description

Use-after-free vulnerability in the t2p_readwrite_pdf_image function in tools/tiff2pdf.c in libtiff 4.0.3 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted TIFF image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

LibTIFF/Libtiff2 versions
cpe:2.3:a:libtiff:libtiff:4.0.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libtiff:libtiff:4.0.3:*:*:*:*:*:*:*
- (no CPE)range: = 4.0.3
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/tiff&distro=openSUSE%20Tumbleweed
Range: < 4.0.7-1.1

Patches

Vulnerability mechanics

References

bugzilla.maptools.org/show_bug.cginvdPatch
bugzilla.redhat.com/show_bug.cginvdPatch
secunia.com/advisories/54543nvdVendor Advisory
secunia.com/advisories/54628nvdVendor Advisory
rhn.redhat.com/errata/RHSA-2014-0223.htmlnvd
www.asmail.be/msg0055359936.htmlnvd
www.debian.org/security/2013/dsa-2744nvd
www.openwall.com/lists/oss-security/2013/08/10/2nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000