Red Hat Security Advisory

RHSA-2026:5958

libtiff security update

Released 2026-03-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2023-28739 CVE-2023-52356 · GHSA-cx8g-4cf5-cjv3

HIGH 72

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02222 Published 2024-01-25 Partial fix · 4.6.0, 4.6.0-6.el10_1.2 +16 CWE-122