CVE-2006-3464

CVE-2006-3464 describes an integer overflow vulnerability in the libtiff library (versions prior to 3.8.2). This flaw allows context-dependent attackers to bypass numeric range checks through large offset values in TIFF directories, potentially leading to arbitrary code execution or denial-of-service via assert errors and other unchecked arithmetic operations. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having a low attack complexity, with potential impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.