High severity7.5OSV Advisory· Published Jan 25, 2024· Updated Aug 3, 2026
CVE-2023-52355
CVE-2023-52355
Description
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords9 versionspkg:apk/chainguard/tiffpkg:apk/chainguard/tiff-devpkg:apk/chainguard/tiff-docpkg:apk/wolfi/tiffpkg:apk/wolfi/tiff-devpkg:apk/wolfi/tiff-docpkg:rpm/almalinux/libtiffpkg:rpm/almalinux/libtiff-develpkg:rpm/almalinux/libtiff-tools
< 0+ 8 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.6.0-8.el10_2.4
- (no CPE)range: < 4.6.0-8.el10_2.4
- (no CPE)range: < 4.6.0-8.el10_2.4
Patches
Vulnerability mechanics
References
13- bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
- gitlab.com/libtiff/libtiff/-/issues/621nvdExploitIssue Tracking
- access.redhat.com/security/cve/CVE-2023-52355nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2025:20801nvd
- access.redhat.com/errata/RHSA-2025:21994nvd
- access.redhat.com/errata/RHSA-2025:23078nvd
- access.redhat.com/errata/RHSA-2025:23079nvd
- access.redhat.com/errata/RHSA-2025:23080nvd
- access.redhat.com/errata/RHSA-2026:3461nvd
- access.redhat.com/errata/RHSA-2026:3462nvd
- access.redhat.com/errata/RHSA-2026:41892nvd
- access.redhat.com/errata/RHSA-2026:43537nvd
- access.redhat.com/errata/RHSA-2026:49671nvd
News mentions
0No linked articles in our index yet.