CVE-2023-52355

Published: Jan 25, 2024

Modified: May 21, 2026

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Vendor	Product	Versions
Unknown	libtiff	affected `0 - < 4.6.0`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:4.4.0-15.el9 - < *`
Red Hat	Red Hat AI Inference Server 3.2	unaffected `3.2.2-1765379088 - < *`
Red Hat	Red Hat AI Inference Server 3.2	unaffected `3.2.2-1765379049 - < *`
Red Hat	Red Hat AI Inference Server 3.2	unaffected `3.2.2-1764871796 - < *`
Red Hat	Red Hat AI Inference Server 3.2	unaffected `1772160593 - < *`
Red Hat	Red Hat AI Inference Server 3.2	unaffected `1772160625 - < *`
Red Hat	Red Hat Discovery 2	unaffected `2.4.0-1763656152 - < *`
Red Hat	Red Hat Enterprise Linux 10	All versions
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 8	All versions