CVE-2017-17973

CVE-2017-17973 describes a heap-based use-after-free vulnerability in the t2p_writeproc function within tiff2pdf.c of LibTIFF 4.0.8. This flaw carries a high CVSSv3 score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for high impact on confidentiality, integrity, and availability if a user is tricked into interacting with a malicious file. Despite its severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, though a third-party report suggests difficulty in reproducing the issue.