CVE-2023-52355

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

State: Published
Severity: 7.5 High
Published: Jan 25, 2024
Updated: Oct 2, 2026
Reserved: Jan 24, 2024

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	redhat

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
libtiff	before 4.6.0Affected
Red Hat Enterprise Linux 10Red Hat	0:4.6.0-8.el10_2.4 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat	0:4.6.0-6.el10_0.4 and laterNot affected
Red Hat Enterprise Linux 9Red Hat	0:4.4.0-15.el9 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat	0:4.4.0-13.el9_6.5 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat	3.2.2-1765379088 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat	3.2.2-1765379049 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat	3.2.2-1764871796 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat	1772160593 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat	1772160625 and laterNot affected
Red Hat Discovery 2Red Hat	2.4.0-1763656152 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276886 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276884 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790277045 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276889 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat	1790276974 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703497 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703506 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703590 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703568 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703586 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat	1790703494 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat	1790703542 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat Enterprise Linux 8Red Hat

References

RHSA-2025:20801vendor-advisory
RHSA-2025:21994vendor-advisory
RHSA-2025:23078vendor-advisory
RHSA-2025:23079vendor-advisory
RHSA-2025:23080vendor-advisory
RHSA-2026:3461vendor-advisory
RHSA-2026:3462vendor-advisory
RHSA-2026:41892vendor-advisory
RHSA-2026:43537vendor-advisory
RHSA-2026:49671vendor-advisory
RHSA-2026:73909vendor-advisory
RHSA-2026:73959vendor-advisory
RHSA-2026:73960vendor-advisory
RHSA-2026:73961vendor-advisory
RHSA-2026:73962vendor-advisory
RHSA-2026:74458vendor-advisory
RHSA-2026:74459vendor-advisory
RHSA-2026:74460vendor-advisory
RHSA-2026:74461vendor-advisory
RHSA-2026:74462vendor-advisory
RHSA-2026:74463vendor-advisory
RHSA-2026:74674vendor-advisory
https://access.redhat.com/security/cve/CVE-2023-52355vdb-entry
RHBZ#2251326issue-tracking
https://gitlab.com/libtiff/libtiff/-/issues/621

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.