Red Hat Security Advisory

RHSA-2025:20801

libtiff security update

Released 2025-11-11 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libtiff-4.4.0-15.el9, libtiff-devel-4.4.0-15.el9
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libtiff-tools-4.4.0-15.el9

TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3

HIGH 72

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02222 Published 2024-01-25 Partial fix · 4.6.0, 4.6.0-6.el10_1.2 +16 CWE-122

TI-2023-28738 CVE-2023-52355 · GHSA-fh6j-mgh8-7prh

LOW 36

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01829 Published 2024-01-25 Partial fix · 4.6.0, 4.6.0-8.el10_2.4 +21 CWE-787