NetSight
IP …
high7.5

CVE-2023-52356

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.

Impact

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 10.0, 11.0
AppleIpados
before 16.7.9
from 17.0 before 17.6
AppleIphone Os
before 16.7.9
from 17.0 before 17.6
AppleMacos
before 12.7.6
from 13.0 before 13.6.8
from 14.0 before 14.6
AppleTvos
before 17.6
AppleVisionos
before 1.3
AppleWatchos
before 10.6
LibtiffLibtiff
before 4.6.0
RedhatAi Inference Server
from 3.2.0 before 3.2.2
Version 3.3.0
RedhatCodeready Linux Builder
Versions 8.0, 9.0, 10.0
RedhatCodeready Linux Builder Eus
Versions 9.6, 10.0
RedhatDiscovery
Version 2.0

Weakness classification

CWE-122CWE-787

References