Skip to content
fr Sign in
7.5 High

CVE-2023-52355 An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the…

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Affected products and versions

Product Affected versions Fixed in
Red Hat Enterprise Linux 9 Versions not published
Red Hat AI Inference Server 3.2 1772160625 earliest → < 1772160625 1772160625
Red Hat Discovery 2 2.4 earliest → < 2.4.0-1763656152 2.4.0-1763656152
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat OpenShift AI 3.2 1790703494 earliest → < 1790703494 1790703494
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Show the 3 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat OpenShift AI 3.0 1790276974 earliest → < 1790276974 1790276974
Red Hat OpenShift AI 3.4 1790703542 earliest → < 1790703542 1790703542

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Enterprise Linux 9

The 1864 CVEs of Red Hat Enterprise Linux 9 →
CVE-2026-123151 Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail Not rated CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 8.1 High CVE-2026-121996 Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 8.2 High CVE-2026-121995 Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail 7.5 High
Track this CVE