7.5
HIGH
CVSS 3.1
CVE-2023-52356
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
Overview
Description
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
Details
INFO
Published Date :
Jan. 25, 2024, 8:15 p.m.
Last Modified :
Nov. 7, 2026, 7:17 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Impact
Affected Products
The following products are affected by CVE-2023-52356
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | [email protected] | ||||
| CVSS 3.1 | HIGH | [email protected] |
Solution
Multiple operating systems and packages are affected; update libtiff and associated packages to remediate.
- Update the affected libtiff packages.
- Upgrade to the latest macOS version.
- Upgrade to the latest Apple iOS version.
- Upgrade to the latest Apple TV version.
Public PoC/Exploit Available at Github
CVE-2023-52356 has a 15 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-52356.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52356 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52356
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
JWPort的部分测试集数据（少量）
Shell
Updated: 3 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : July 19, 2026, 11:35 a.m.
This repo has been linked 32 different CVEs too.
RAD Security Image Scanner
Dockerfile Makefile Go
Updated: 5 months, 2 weeks ago
0 stars
0 fork
0 watcher
Born at : May 22, 2026, 11:32 a.m.
This repo has been linked 14 different CVEs too.
None
Dockerfile Shell Rust C++ C
Updated: 7 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : March 17, 2026, 6:45 a.m.
This repo has been linked 3 different CVEs too.
None
Python
Updated: 7 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : Jan. 26, 2026, 8:17 a.m.
This repo has been linked 2857 different CVEs too.
None
Dockerfile Shell Rust C++ C
Updated: 9 months, 4 weeks ago
0 stars
0 fork
0 watcher
Born at : Jan. 14, 2026, 3:03 a.m.
This repo has been linked 3 different CVEs too.
None
Dockerfile Shell Rust C++ C Python
Updated: 11 months, 3 weeks ago
0 stars
0 fork
0 watcher
Born at : Nov. 2, 2025, 6:02 a.m.
This repo has been linked 3 different CVEs too.
None
Dockerfile Shell Rust C++ C
Updated: 1 year, 1 month ago
0 stars
0 fork
0 watcher
Born at : Sept. 23, 2025, 9:55 a.m.
This repo has been linked 3 different CVEs too.
None
Makefile Smarty Dockerfile Shell HCL JavaScript Go HTML TypeScript CSS
Updated: 1 year, 4 months ago
3 stars
0 fork
0 watcher
Born at : June 30, 2025, 6:02 p.m.
This repo has been linked 37 different CVEs too.
Run Home Assistant smaller, lightweight and more secure than ever
Dockerfile Shell
Updated: 1 year, 3 months ago
7 stars
0 fork
0 watcher
Born at : June 3, 2025, 8:38 a.m.
This repo has been linked 18 different CVEs too.
Задание по DevSecOps второе задание
Updated: 2 years ago
0 stars
0 fork
0 watcher
Born at : Nov. 5, 2024, 8:20 p.m.
This repo has been linked 92 different CVEs too.
None
Dockerfile Shell
Updated: 2 years ago
0 stars
0 fork
0 watcher
Born at : Oct. 30, 2024, 10:41 p.m.
This repo has been linked 31 different CVEs too.
None
Shell Rust C++ C Dockerfile
Updated: 2 years, 2 months ago
0 stars
0 fork
0 watcher
Born at : Aug. 12, 2024, 9:25 a.m.
This repo has been linked 3 different CVEs too.
Ini adalah repository kumpulan CVE v.5
allcve cve cvelist newcve
Updated: 2 years, 3 months ago
2 stars
0 fork
0 watcher
Born at : March 24, 2024, 3:01 p.m.
This repo has been linked 1214 different CVEs too.
PromtFuzz is an automated tool that generates high-quality fuzz drivers for libraries via a fuzz loop constructed on mutating LLMs' prompts.
Dockerfile Shell Rust C++ C Python
Updated: 5 months, 3 weeks ago
334 stars
38 fork
38 watcher
Born at : Dec. 16, 2023, 5:46 a.m.
This repo has been linked 3 different CVEs too.
None
HTML C# CSS JavaScript Dockerfile
Updated: 2 years, 2 months ago
1 stars
2 fork
2 watcher
Born at : Aug. 30, 2023, 8:51 p.m.
This repo has been linked 62 different CVEs too.
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52356 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52356 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 07, 2026
Action Type Old Value New Value Added Reference http://seclists.org/fulldisclosure/2024/Jul/16 Added Reference http://seclists.org/fulldisclosure/2024/Jul/17 Added Reference http://seclists.org/fulldisclosure/2024/Jul/18 Added Reference http://seclists.org/fulldisclosure/2024/Jul/19 Added Reference http://seclists.org/fulldisclosure/2024/Jul/20 Added Reference http://seclists.org/fulldisclosure/2024/Jul/21 Added Reference http://seclists.org/fulldisclosure/2024/Jul/22 Added Reference http://seclists.org/fulldisclosure/2024/Jul/23 Added Reference https://access.redhat.com/security/cve/CVE-2023-52356 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Added Reference https://gitlab.com/libtiff/libtiff/-/issues/622 Added Reference https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Added Reference https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Added Reference https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html Added Reference https://support.apple.com/kb/HT214116 Added Reference https://support.apple.com/kb/HT214117 Added Reference https://support.apple.com/kb/HT214118 Added Reference https://support.apple.com/kb/HT214119 Added Reference https://support.apple.com/kb/HT214120 Added Reference https://support.apple.com/kb/HT214122 Added Reference https://support.apple.com/kb/HT214123 Added Reference https://support.apple.com/kb/HT214124 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/16 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/17 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/18 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/19 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/20 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/21 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/22 Removed Reference http://seclists.org/fulldisclosure/2024/Jul/23 Removed Reference https://access.redhat.com/security/cve/CVE-2023-52356 Removed Reference https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Removed Reference https://gitlab.com/libtiff/libtiff/-/issues/622 Removed Reference https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Removed Reference https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Removed Reference https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html Removed Reference https://support.apple.com/kb/HT214116 Removed Reference https://support.apple.com/kb/HT214117 Removed Reference https://support.apple.com/kb/HT214118 Removed Reference https://support.apple.com/kb/HT214119 Removed Reference https://support.apple.com/kb/HT214120 Removed Reference https://support.apple.com/kb/HT214122 Removed Reference https://support.apple.com/kb/HT214123 Removed Reference https://support.apple.com/kb/HT214124 Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/16 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/17 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/18 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/19 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/20 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/21 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/22 Types: Mailing List, Third Party Advisory Removed Reference Type http://seclists.org/fulldisclosure/2024/Jul/23 Types: Mailing List, Third Party Advisory Removed Reference Type https://access.redhat.com/security/cve/CVE-2023-52356 Types: Vendor Advisory Removed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Vendor Advisory Removed Reference Type https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Exploit, Issue Tracking, Patch Removed Reference Type https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Types: Issue Tracking, Patch Removed Reference Type https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Types: Mailing List, Third Party Advisory Removed Reference Type https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html Types: Mailing List, Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214116 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214117 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214118 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214119 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214120 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214122 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214123 Types: Third Party Advisory Removed Reference Type https://support.apple.com/kb/HT214124 Types: Third Party Advisory -
CVE Modified by [email protected]
Nov. 07, 2026
Action Type Old Value New Value Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2023/52xxx/CVE-2023-52356.json">CVE-2023-52356</a> Added Reference https://access.redhat.com/errata/RHSA-2024:5079 Added Reference https://access.redhat.com/errata/RHSA-2025:20801 Added Reference https://access.redhat.com/errata/RHSA-2025:21994 Added Reference https://access.redhat.com/errata/RHSA-2025:23078 Added Reference https://access.redhat.com/errata/RHSA-2025:23079 Added Reference https://access.redhat.com/errata/RHSA-2025:23080 Added Reference https://access.redhat.com/errata/RHSA-2026:16174 Added Reference https://access.redhat.com/errata/RHSA-2026:25096 Added Reference https://access.redhat.com/errata/RHSA-2026:3461 Added Reference https://access.redhat.com/errata/RHSA-2026:3462 Added Reference https://access.redhat.com/errata/RHSA-2026:5958 Added Reference https://access.redhat.com/errata/RHSA-2026:7081 Added Reference https://access.redhat.com/errata/RHSA-2026:7304 Added Reference https://access.redhat.com/errata/RHSA-2026:7335 Added Reference https://access.redhat.com/errata/RHSA-2026:8746 Added Reference https://access.redhat.com/errata/RHSA-2026:8747 Added Reference https://access.redhat.com/errata/RHSA-2026:8748 Added Reference https://access.redhat.com/security/cve/CVE-2023-52356 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Added Reference https://gitlab.com/libtiff/libtiff/-/issues/622 Added Reference https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Removed Reference https://access.redhat.com/errata/RHSA-2024:5079 Removed Reference https://access.redhat.com/errata/RHSA-2025:20801 Removed Reference https://access.redhat.com/errata/RHSA-2025:21994 Removed Reference https://access.redhat.com/errata/RHSA-2025:23078 Removed Reference https://access.redhat.com/errata/RHSA-2025:23079 Removed Reference https://access.redhat.com/errata/RHSA-2025:23080 Removed Reference https://access.redhat.com/errata/RHSA-2026:16174 Removed Reference https://access.redhat.com/errata/RHSA-2026:25096 Removed Reference https://access.redhat.com/errata/RHSA-2026:3461 Removed Reference https://access.redhat.com/errata/RHSA-2026:3462 Removed Reference https://access.redhat.com/errata/RHSA-2026:5958 Removed Reference https://access.redhat.com/errata/RHSA-2026:7081 Removed Reference https://access.redhat.com/errata/RHSA-2026:7304 Removed Reference https://access.redhat.com/errata/RHSA-2026:7335 Removed Reference https://access.redhat.com/errata/RHSA-2026:8746 Removed Reference https://access.redhat.com/errata/RHSA-2026:8747 Removed Reference https://access.redhat.com/errata/RHSA-2026:8748 Removed Reference https://access.redhat.com/security/cve/CVE-2023-52356 Removed Reference https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Removed Reference https://gitlab.com/libtiff/libtiff/-/issues/622 Removed Reference https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Removed Reference Type https://access.redhat.com/errata/RHSA-2024:5079 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2025:20801 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2025:21994 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2025:23078 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2025:23079 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2025:23080 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:16174 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:25096 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:3461 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:3462 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:5958 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:7081 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:7304 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:7335 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:8746 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:8747 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/errata/RHSA-2026:8748 Types: Vendor Advisory Removed Reference Type https://access.redhat.com/security/cve/CVE-2023-52356 Types: Vendor Advisory Removed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Vendor Advisory Removed Reference Type https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Exploit, Issue Tracking, Patch Removed Reference Type https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Types: Issue Tracking, Patch -
Modified Analysis by [email protected]
Oct. 28, 2026
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions up to (excluding) 12.7.6 *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions from (including) 14.0 up to (excluding) 14.6 *cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* versions from (including) 13.0 up to (excluding) 13.6.8 *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions from (including) 17.0 up to (excluding) 17.6 *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions from (including) 17.0 up to (excluding) 17.6 *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions up to (excluding) 16.7.9 *cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* versions up to (excluding) 16.7.9 *cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* versions up to (excluding) 10.6 *cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* versions up to (excluding) 17.6 *cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* versions up to (excluding) 1.3 Changed CPE Configuration OR *cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:* OR *cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:* versions up to (excluding) 4.6.0 Changed CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* OR *cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* *cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* *cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* *cpe:2.3:a:redhat:codeready_linux_builder:10.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux_eus:10.0:*:*:*:*:*:*:* *cpe:2.3:a:redhat:codeready_linux_builder_eus:9.6:*:*:*:*:*:*:* *cpe:2.3:a:redhat:discovery:2.0:*:*:*:*:*:*:* *cpe:2.3:a:redhat:codeready_linux_builder_eus:10.0:*:*:*:*:*:*:* *cpe:2.3:a:redhat:ai_inference_server:*:*:*:*:*:*:*:* versions from (including) 3.2.0 up to (excluding) 3.2.2 *cpe:2.3:a:redhat:ai_inference_server:3.3.0:*:*:*:*:*:*:* Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2024:5079 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2025:20801 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2025:21994 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2025:23078 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2025:23079 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2025:23080 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:16174 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:25096 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:3461 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:3462 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:5958 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:7081 Types: Vendor Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/16 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/17 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/18 Types: Mailing List, Third Party Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:7304 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:7335 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:8746 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:8747 Types: Vendor Advisory Added Reference Type Red Hat, Inc.: https://access.redhat.com/errata/RHSA-2026:8748 Types: Vendor Advisory Changed Reference Type Red Hat, Inc.: https://access.redhat.com/security/cve/CVE-2023-52356 Types: Third Party Advisory Red Hat, Inc.: https://access.redhat.com/security/cve/CVE-2023-52356 Types: Vendor Advisory Changed Reference Type Red Hat, Inc.: https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Third Party Advisory Red Hat, Inc.: https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Vendor Advisory Changed Reference Type Red Hat, Inc.: https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Issue Tracking, Patch Red Hat, Inc.: https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Exploit, Issue Tracking, Patch Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/19 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/20 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/21 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/22 Types: Mailing List, Third Party Advisory Added Reference Type CVE: http://seclists.org/fulldisclosure/2024/Jul/23 Types: Mailing List, Third Party Advisory Changed Reference Type CVE: https://access.redhat.com/security/cve/CVE-2023-52356 Types: Third Party Advisory CVE: https://access.redhat.com/security/cve/CVE-2023-52356 Types: Vendor Advisory Changed Reference Type CVE: https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Third Party Advisory CVE: https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Types: Issue Tracking, Vendor Advisory Changed Reference Type CVE: https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Issue Tracking, Patch CVE: https://gitlab.com/libtiff/libtiff/-/issues/622 Types: Exploit, Issue Tracking, Patch Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Types: Mailing List, Third Party Advisory Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html Types: Mailing List, Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214116 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214117 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214118 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214119 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214120 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214122 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214123 Types: Third Party Advisory Added Reference Type CVE: https://support.apple.com/kb/HT214124 Types: Third Party Advisory -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2023-52356', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'poc'}, {'automatable': 'yes'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2024-01-28T01:27:48.546657Z'} -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.6.0', 'versionType': 'semver'}], 'packageName': 'libtiff', 'collectionURL': 'https://gitlab.com/libtiff/libtiff', 'defaultStatus': 'unaffected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:10.1'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10', 'versions': [{'status': 'unaffected', 'version': '0:4.6.0-6.el10_1.2', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux_eus:10.0'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 10.0 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '0:4.6.0-6.el10_0.2', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:8::appstream', 'cpe:/a:redhat:enterprise_linux:8::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'versions': [{'status': 'unaffected', 'version': '0:4.0.9-32.el8_10', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:enterprise_linux:9::appstream', 'cpe:/a:redhat:enterprise_linux:9::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9', 'versions': [{'status': 'unaffected', 'version': '0:4.4.0-15.el9', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:rhel_eus:9.6::appstream', 'cpe:/a:redhat:rhel_eus:9.6::crb'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 9.6 Extended Update Support', 'versions': [{'status': 'unaffected', 'version': '0:4.4.0-13.el9_6.3', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '3.2.2-1765379088', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '3.2.2-1765379049', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-rocm-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '3.2.2-1764871796', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/model-opt-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1780681984', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/model-opt-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1772160593', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1772160625', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-rocm-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.2', 'versions': [{'status': 'unaffected', 'version': '1775740563', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1778244546', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-spyre-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1775680192', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1775680262', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/vllm-rocm-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:ai_inference_server:3.3::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat AI Inference Server 3.3', 'versions': [{'status': 'unaffected', 'version': '1775749857', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'rhaiis/model-opt-cuda-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/a:redhat:discovery:2::el9'], 'vendor': 'Red Hat', 'product': 'Red Hat Discovery 2', 'versions': [{'status': 'unaffected', 'version': '2.4.0-1763656152', 'lessThan': '*', 'versionType': 'rpm'}], 'packageName': 'discovery/discovery-ui-rhel9', 'collectionURL': 'https://catalog.redhat.com/software/containers/', 'defaultStatus': 'affected'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:6'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 6', 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unknown'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'packageName': 'compat-libtiff3', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unknown'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:7'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 7', 'packageName': 'libtiff', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'unknown'}, {'cpes': ['cpe:/o:redhat:enterprise_linux:8'], 'vendor': 'Red Hat', 'product': 'Red Hat Enterprise Linux 8', 'packageName': 'compat-libtiff3', 'collectionURL': 'https://access.redhat.com/downloads/content/package-browser/', 'defaultStatus': 'affected'}] -
CVE Modified by [email protected]
Jun. 10, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:25096 -
CVE Modified by [email protected]
May. 12, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:16174 -
CVE Modified by [email protected]
Apr. 17, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:8746 Added Reference https://access.redhat.com/errata/RHSA-2026:8748 -
CVE Modified by [email protected]
Apr. 17, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:8747 -
CVE Modified by [email protected]
Apr. 09, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:7335 -
CVE Modified by [email protected]
Apr. 09, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:7304 -
CVE Modified by [email protected]
Apr. 08, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:7081 -
CVE Modified by [email protected]
Mar. 26, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:5958 -
CVE Modified by [email protected]
Feb. 27, 2026
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2026:3461 Added Reference https://access.redhat.com/errata/RHSA-2026:3462 -
CVE Modified by [email protected]
Dec. 10, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:23078 Added Reference https://access.redhat.com/errata/RHSA-2025:23079 Added Reference https://access.redhat.com/errata/RHSA-2025:23080 -
CVE Modified by [email protected]
Nov. 24, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:21994 -
CVE Modified by [email protected]
Nov. 11, 2025
Action Type Old Value New Value Added Reference https://access.redhat.com/errata/RHSA-2025:20801 -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 03, 2025
Action Type Old Value New Value Added Reference https://lists.debian.org/debian-lts-announce/2025/01/msg00019.html -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference http://seclists.org/fulldisclosure/2024/Jul/16 Added Reference http://seclists.org/fulldisclosure/2024/Jul/17 Added Reference http://seclists.org/fulldisclosure/2024/Jul/18 Added Reference http://seclists.org/fulldisclosure/2024/Jul/19 Added Reference http://seclists.org/fulldisclosure/2024/Jul/20 Added Reference http://seclists.org/fulldisclosure/2024/Jul/21 Added Reference http://seclists.org/fulldisclosure/2024/Jul/22 Added Reference http://seclists.org/fulldisclosure/2024/Jul/23 Added Reference https://access.redhat.com/security/cve/CVE-2023-52356 Added Reference https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Added Reference https://gitlab.com/libtiff/libtiff/-/issues/622 Added Reference https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Added Reference https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Added Reference https://support.apple.com/kb/HT214116 Added Reference https://support.apple.com/kb/HT214117 Added Reference https://support.apple.com/kb/HT214118 Added Reference https://support.apple.com/kb/HT214119 Added Reference https://support.apple.com/kb/HT214120 Added Reference https://support.apple.com/kb/HT214122 Added Reference https://support.apple.com/kb/HT214123 Added Reference https://support.apple.com/kb/HT214124 -
CVE Modified by [email protected]
Sep. 16, 2024
Action Type Old Value New Value Removed Reference Red Hat, Inc. https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214119 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214123 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214122 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214117 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214118 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214116 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214120 Removed Reference Red Hat, Inc. https://support.apple.com/kb/HT214124 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/16 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/23 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/21 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/20 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/17 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/22 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/18 Removed Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/19 -
CVE Modified by [email protected]
Aug. 07, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://access.redhat.com/errata/RHSA-2024:5079 [No types assigned] -
CVE Modified by [email protected]
Jul. 30, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/18 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/19 [No types assigned] -
CVE Modified by [email protected]
Jul. 30, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/16 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/23 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/21 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/20 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/17 [No types assigned] Added Reference Red Hat, Inc. http://seclists.org/fulldisclosure/2024/Jul/22 [No types assigned] -
CVE Modified by [email protected]
Jul. 29, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214119 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214123 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214122 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214117 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214118 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214116 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214120 [No types assigned] Added Reference Red Hat, Inc. https://support.apple.com/kb/HT214124 [No types assigned] -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
Mar. 11, 2024
Action Type Old Value New Value Added Reference Red Hat, Inc. https://lists.debian.org/debian-lts-announce/2024/03/msg00011.html [No types assigned] -
Initial Analysis by [email protected]
Jan. 31, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://access.redhat.com/security/cve/CVE-2023-52356 No Types Assigned https://access.redhat.com/security/cve/CVE-2023-52356 Third Party Advisory Changed Reference Type https://bugzilla.redhat.com/show_bug.cgi?id=2251344 No Types Assigned https://bugzilla.redhat.com/show_bug.cgi?id=2251344 Issue Tracking, Third Party Advisory Changed Reference Type https://gitlab.com/libtiff/libtiff/-/issues/622 No Types Assigned https://gitlab.com/libtiff/libtiff/-/issues/622 Issue Tracking, Patch Changed Reference Type https://gitlab.com/libtiff/libtiff/-/merge_requests/546 No Types Assigned https://gitlab.com/libtiff/libtiff/-/merge_requests/546 Issue Tracking, Patch Added CWE NIST CWE-787 Added CPE Configuration OR *cpe:2.3:a:libtiff:libtiff:-:*:*:*:*:*:*:* Added CPE Configuration OR *cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* *cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* -
CVE Received by [email protected]
Jan. 25, 2024
Action Type Old Value New Value Added Description A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service. Added Reference Red Hat, Inc. https://access.redhat.com/security/cve/CVE-2023-52356 [No types assigned] Added Reference Red Hat, Inc. https://bugzilla.redhat.com/show_bug.cgi?id=2251344 [No types assigned] Added Reference Red Hat, Inc. https://gitlab.com/libtiff/libtiff/-/issues/622 [No types assigned] Added Reference Red Hat, Inc. https://gitlab.com/libtiff/libtiff/-/merge_requests/546 [No types assigned] Added CWE Red Hat, Inc. CWE-122 Added CVSS V3.1 Red Hat, Inc. AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.