Every CVE Search/ Get API key

CVE-2023-52355

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

7.5 HighFix available

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.83%Up 1.8 points since Jan 31, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2023-57011 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
EUVD-2023-57011
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-fh6j-mgh8-7prh 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file...

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
GHSA-fh6j-mgh8-7prh
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-787
Updated
2026-11-02
NVD 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSV 7.5

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVDEBIAN-CVE-2023-52355 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
DEBIAN-CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVJLSEC-2025-315 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to...

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
JLSEC-2025-315
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:20801 7.5

Red Hat Security Advisory: libtiff security update

Record
RHSA-2025:20801
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:41892 7.5

Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

Record
RHSA-2026:41892
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43537 7.5

Red Hat Security Advisory: libtiff security update

Record
RHSA-2026:43537
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:49671 7.5

Red Hat Security Advisory: libtiff security, bug fix, and enhancement update

Record
RHSA-2026:49671
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:20801 7.5

Moderate: libtiff security update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

  • libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service (CVE-2023-52356)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

Record
RLSA-2025:20801
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:41892 7.5

Important: libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Bug Fix(es) and Enhancement(s):

  • Reintroduce the tiffcp -i option (JIRA:Rocky Linux-185328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:41892
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-52355 7.5

CVE-2023-52355 in tiff - Patched by Root

Root has patched CVE-2023-52355 in the tiff package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2023-52355 7.5

CVE-2023-52355 in tiff - Patched by Root

Root has patched CVE-2023-52355 in the tiff package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-52355 7.5

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Record
UBUNTU-CVE-2023-52355
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:41892 No score

Important: libtiff security, bug fix, and enhancement update

The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF) files.

Security Fix(es):

  • libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)
  • libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

Bug Fix(es) and Enhancement(s):

  • Reintroduce the tiffcp -i option (JIRA:AlmaLinux-185328)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:41892
Updated
2026-11-02
OSVCLSA-2024-1722529534 No score

libtiff: Fix of 2 CVEs

  • CVE-2023-52356: added proper validation and boundary checks to prevent the SEGV and potential heap-buffer overflow
  • CVE-2023-52355: added functionality to set a maximum possible allocation size in bytes in order to prevent out-of-memory issues when opening a TIFF file and added memory limit option in tools
Record
CLSA-2024-1722529534
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libtiff
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff-devel
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff-tools
AlmaLinux:10
From an advisory covering 2 CVEs
 before 4.6.0-8.el10_2.4
4.6.0-8.el10_2.4
libtiff
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 4.0.3-35.el7.tuxcare.els1
4.0.3-35.el7.tuxcare.els1
libtiff-devel
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 4.0.3-35.el7.tuxcare.els1
4.0.3-35.el7.tuxcare.els1
libtiff-static
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 4.0.3-35.el7.tuxcare.els1
4.0.3-35.el7.tuxcare.els1
libtiff-tools
TuxCare:CentOS:7
From an advisory covering 2 CVEs
 before 4.0.3-35.el7.tuxcare.els1
4.0.3-35.el7.tuxcare.els1
tiff
Debian:12
 All versions, plus listed versions
4.5.0-64.5.0-6+deb12u14.5.0-6+deb12u24.5.0-6+deb12u34.5.0-6+deb12u4
Show 18 moreShow less
4.5.1+git230720-14.5.1+git230720-24.5.1+git230720-34.5.1+git230720-44.5.1+git230720-54.5.1-14.5.1~rc3-14.6.0-14.6.0-24.7.0-14.7.0-24.7.0-34.7.0-44.7.0-54.7.1-14.7.1-24.7.1-34.7.2-1
 None known
tiff
Debian:13
 before 4.5.1+git230720-4
4.5.1+git230720-4
tiff
Debian:14
 before 4.5.1+git230720-4
4.5.1+git230720-4
Show 53 moreShow less
Affected packages
PackageAffectedFixed
Libtiff_jll
Julia
 before 4.6.0+0
4.6.0+0
libtiff
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-debugsource
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-tools
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff-tools-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9
0:4.4.0-15.el9
libtiff
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-devel
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-tools-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff-tools
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
libtiff
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-devel
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-tools
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff-tools-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:4.4.0-13.el9_6.5
0:4.4.0-13.el9_6.5
libtiff
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-devel
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-tools-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff-tools
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:4.6.0-6.el10_0.4
0:4.6.0-6.el10_0.4
libtiff
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:4.4.0-15.el9_7.2.0.1
0:4.4.0-15.el9_7.2.0.1
libtiff
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:4.6.0-8.el10_2.4
0:4.6.0-8.el10_2.4
tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.17
4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20
rootio-tiff
Root:Debian:11
 before 4.2.0-1+deb11u8.aikido.17
4.2.0-1+deb11u8.aikido.174.2.0-1+deb11u8.aikido.194.2.0-1+deb11u8.aikido.184.2.0-1+deb11u8.root.io.164.2.0-1+deb11u8.aikido.20
tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.20
4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22
rootio-tiff
Root:Debian:12
 before 4.5.0-6+deb12u4.aikido.20
4.5.0-6+deb12u4.aikido.204.5.0-6+deb12u4.root.io.194.5.0-6+deb12u4.aikido.214.5.0-6+deb12u4.aikido.22
gdal
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.9.0-3.1ubuntu41.9.0-3.1ubuntu61.10.1+dfsg-21.10.1+dfsg-2build11.10.1+dfsg-3
Show 8 moreShow less
1.10.1+dfsg-3build11.10.1+dfsg-3build21.10.1+dfsg-3ubuntu11.10.1+dfsg-3ubuntu21.10.1+dfsg-5ubuntu11.10.1+dfsg-5ubuntu1+esm11.10.1+dfsg-5ubuntu1+esm21.10.1+dfsg-5ubuntu1+esm3
 None known
tiff
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.0.2-4ubuntu34.0.3-5ubuntu14.0.3-64.0.3-6ubuntu14.0.3-7
Show 27 moreShow less
4.0.3-7ubuntu0.14.0.3-7ubuntu0.24.0.3-7ubuntu0.34.0.3-7ubuntu0.44.0.3-7ubuntu0.64.0.3-7ubuntu0.74.0.3-7ubuntu0.84.0.3-7ubuntu0.94.0.3-7ubuntu0.104.0.3-7ubuntu0.114.0.3-7ubuntu0.11+esm14.0.3-7ubuntu0.11+esm24.0.3-7ubuntu0.11+esm34.0.3-7ubuntu0.11+esm44.0.3-7ubuntu0.11+esm54.0.3-7ubuntu0.11+esm64.0.3-7ubuntu0.11+esm74.0.3-7ubuntu0.11+esm84.0.3-7ubuntu0.11+esm94.0.3-7ubuntu0.11+esm104.0.3-7ubuntu0.11+esm114.0.3-7ubuntu0.11+esm124.0.3-7ubuntu0.11+esm134.0.3-7ubuntu0.11+esm144.0.3-7ubuntu0.11+esm154.0.3-7ubuntu0.11+esm164.0.3-7ubuntu0.11+esm17
 None known
tiff
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.0.3-12.3ubuntu24.0.5-14.0.6-14.0.6-1ubuntu0.14.0.6-1ubuntu0.2
Show 25 moreShow less
4.0.6-1ubuntu0.34.0.6-1ubuntu0.44.0.6-1ubuntu0.54.0.6-1ubuntu0.64.0.6-1ubuntu0.74.0.6-1ubuntu0.84.0.6-1ubuntu0.8+esm14.0.6-1ubuntu0.8+esm24.0.6-1ubuntu0.8+esm34.0.6-1ubuntu0.8+esm44.0.6-1ubuntu0.8+esm64.0.6-1ubuntu0.8+esm74.0.6-1ubuntu0.8+esm84.0.6-1ubuntu0.8+esm94.0.6-1ubuntu0.8+esm104.0.6-1ubuntu0.8+esm114.0.6-1ubuntu0.8+esm124.0.6-1ubuntu0.8+esm134.0.6-1ubuntu0.8+esm144.0.6-1ubuntu0.8+esm154.0.6-1ubuntu0.8+esm164.0.6-1ubuntu0.8+esm174.0.6-1ubuntu0.8+esm184.0.6-1ubuntu0.8+esm194.0.6-1ubuntu0.8+esm20
 None known
gdal
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.11.2+dfsg-3ubuntu31.11.2+dfsg-3ubuntu41.11.3+dfsg-2build11.11.3+dfsg-2build21.11.3+dfsg-2build3
Show 5 moreShow less
1.11.3+dfsg-31.11.3+dfsg-3build11.11.3+dfsg-3build21.11.3+dfsg-3ubuntu0.1~esm11.11.3+dfsg-3ubuntu0.1~esm2
 None known
tiff
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.0.8-54.0.8-64.0.9-14.0.9-24.0.9-3
Show 23 moreShow less
4.0.9-44.0.9-4ubuntu14.0.9-54.0.9-5ubuntu0.14.0.9-5ubuntu0.24.0.9-5ubuntu0.34.0.9-5ubuntu0.44.0.9-5ubuntu0.54.0.9-5ubuntu0.64.0.9-5ubuntu0.74.0.9-5ubuntu0.84.0.9-5ubuntu0.94.0.9-5ubuntu0.104.0.9-5ubuntu0.10+esm14.0.9-5ubuntu0.10+esm24.0.9-5ubuntu0.10+esm34.0.9-5ubuntu0.10+esm44.0.9-5ubuntu0.10+esm54.0.9-5ubuntu0.10+esm64.0.9-5ubuntu0.10+esm74.0.9-5ubuntu0.10+esm84.0.9-5ubuntu0.10+esm94.0.9-5ubuntu0.10+esm10
 None known
neuron
Ubuntu:18.04:LTS
 All versions, plus listed versions
7.5-1
 None known
qtwebengine-opensource-src
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.9.1+dfsg-45.9.1+dfsg-4ubuntu15.9.2+dfsg-2ubuntu15.9.3+dfsg-0ubuntu15.9.4+dfsg-0ubuntu15.9.5+dfsg-0ubuntu25.9.5+dfsg-0ubuntu2+esm1
 None known
texmaker
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.5-15.0.2-15.0.2-1build15.0.2-1build25.0.2-1ubuntu0.1~esm1
 None known
tiff
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.0.10+git191003-14.1.0+git191117-14.1.0+git191117-24.1.0+git191117-2build14.1.0+git191117-2ubuntu0.20.04.1
Show 16 moreShow less
4.1.0+git191117-2ubuntu0.20.04.24.1.0+git191117-2ubuntu0.20.04.34.1.0+git191117-2ubuntu0.20.04.44.1.0+git191117-2ubuntu0.20.04.54.1.0+git191117-2ubuntu0.20.04.64.1.0+git191117-2ubuntu0.20.04.74.1.0+git191117-2ubuntu0.20.04.84.1.0+git191117-2ubuntu0.20.04.94.1.0+git191117-2ubuntu0.20.04.104.1.0+git191117-2ubuntu0.20.04.114.1.0+git191117-2ubuntu0.20.04.124.1.0+git191117-2ubuntu0.20.04.134.1.0+git191117-2ubuntu0.20.04.144.1.0+git191117-2ubuntu0.20.04.14+esm14.1.0+git191117-2ubuntu0.20.04.14+esm24.1.0+git191117-2ubuntu0.20.04.14+esm3
 None known
neuron
Ubuntu:20.04:LTS
 All versions, plus listed versions
7.6.3-1build27.6.3-1build37.6.3-1build4
 None known
qtwebengine-opensource-src
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.12.4+dfsg-1ubuntu15.12.4+dfsg-1ubuntu35.12.5+dfsg-3ubuntu15.12.5+dfsg-6ubuntu25.12.5+dfsg-7
Show 4 moreShow less
5.12.5+dfsg-7build15.12.8+dfsg-0ubuntu15.12.8+dfsg-0ubuntu1.15.12.8+dfsg-0ubuntu1.1+esm1
 None known
texmaker
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.0.3-1build25.0.3-1build35.0.3-1build45.0.3-1build55.0.3-1ubuntu0.20.04.1~esm1
 None known
neuron
Ubuntu:22.04:LTS
 All versions, plus listed versions
7.6.3-1build57.6.3-1build6
 None known
qtwebengine-opensource-src
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.6+dfsg-15.15.6+dfsg-25.15.7+dfsg-25.15.8+dfsg-15.15.8+dfsg-1build15.15.8+dfsg-1build25.15.8+dfsg-25.15.9+dfsg-1
 None known
texmaker
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.0.3-1build85.0.3-1build9
 None known
tiff
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.3.0-14.3.0-24.3.0-34.3.0-3build14.3.0-4
Show 15 moreShow less
4.3.0-54.3.0-64.3.0-6ubuntu0.14.3.0-6ubuntu0.24.3.0-6ubuntu0.34.3.0-6ubuntu0.44.3.0-6ubuntu0.54.3.0-6ubuntu0.64.3.0-6ubuntu0.74.3.0-6ubuntu0.84.3.0-6ubuntu0.94.3.0-6ubuntu0.104.3.0-6ubuntu0.114.3.0-6ubuntu0.124.3.0-6ubuntu0.13
 None known

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-52355 is a high vulnerability (CVSS 7.5) in Libtiff, published January 25, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in tiff 4.5.1+git230720-4.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open