vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-52356

Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

HIGH
7.5
CVSS Score
Published: January 25, 2024 at 08:03 PM UTC
Updated: October 28, 2026 at 07:06 PM UTC
14 products affected across 4 vendorsmacOSDebian LinuxiPhone OS

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 3%
SSVC
PoC

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

iPadOS· Apple
95%
v < 16.7.917.0 ≤ v < 17.6
iPhone OS· Apple
95%
v < 16.7.917.0 ≤ v < 17.6
macOS· Apple
95%
v < 12.7.613.0 ≤ v < 13.6.814.0 ≤ v < 14.6
tvOS· Apple
95%
v < 17.6
visionOS· Apple
95%
v < 1.3
watchOS· Apple
95%
v < 10.6
Debian Linux· Debiandrupal
95%
10.011.0
LibTIFF· Libtiff
95%
v < 4.6.0
AI Inference Server· Red Hatcontainer
95%
3.2.0 ≤ v < 3.2.23.3.0
Vendor states this is fixed in 1772160593 (unaffected)
Vendor states this is fixed in 1772160625 (unaffected)
Vendor states this is fixed in 1775680192 (unaffected)
Vendor states this is fixed in 1775680262 (unaffected)
Vendor states this is fixed in 1775740563 (unaffected)
Vendor states this is fixed in 1775749857 (unaffected)
Vendor states this is fixed in 1778244546 (unaffected)
Vendor states this is fixed in 1780681984 (unaffected)
Vendor states this is fixed in 3.2.2-1764871796 (unaffected)
Vendor states this is fixed in 3.2.2-1765379049 (unaffected)
Vendor states this is fixed in 3.2.2-1765379088 (unaffected)
Codeready Linux Builder· Red Hat
95%
10.08.09.0

References (39)

Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2024:5079
VDB Entryx_refsource_REDHATThird Party AdvisoryVendor Advisory
Source: [email protected]
https://access.redhat.com/security/cve/CVE-2023-52356
Issue Trackingx_refsource_REDHATThird Party AdvisoryVendor Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=2251344
Issue TrackingPatchExploit
Source: [email protected]
https://gitlab.com/libtiff/libtiff/-/issues/622
Issue TrackingPatch
Source: [email protected]
https://gitlab.com/libtiff/libtiff/-/merge_requests/546
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Jul/16
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Jul/17
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
http://seclists.org/fulldisclosure/2024/Jul/18

SSVC — Action Prioritization

SSVCPoCAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHredhat
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-122CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card