CVE-2023-52355

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 25, 2024
Updated: May 17, 2024
CWE ID 787

Summary

CVE-2023-52355 is a newly discovered vulnerability in the libtiff library. It is an out-of-memory issue that can be exploited when the TIFFRasterScanlineSize64() API is called with a specially crafted TIFF file. An attacker can cause a denial of service by providing an input smaller than 379 KB. The flaw allows the attacker to exhaust the target system's memory, leading to a crash or unresponsiveness. This vulnerability poses a significant risk to systems that handle TIFF files and could be used for disruptive attacks. Administrators are advised to update their libtiff libraries to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • LibTIFF
  • Red Hat Enterprise Linux

Affected Vendors

  • Red Hat
  • Libtiff