Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

CISA ADP · SSVC 2.0.3

Exploitation

Poc

Automatable

Yes

Technical impact

Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

• libtiff Vendor— Affected before 4.6.0 Fixed in 4.6.0 Patch available CNA
• Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 4.6.0-6.el10_1.2 Patch available CNA
• Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 4.6.0-6.el10_0.2 Patch available CNA
• Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.0.9-32.el8_10 Patch available CNA
• Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 4.4.0-15.el9 Patch available CNA
• Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 4.4.0-13.el9_6.3 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 3.2.2-1765379088 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 3.2.2-1765379049 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 3.2.2-1764871796 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1780681984 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1772160593 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1772160625 Patch available CNA
• Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1775740563 Patch available CNA
• Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1778244546 Patch available CNA
• Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1775680192 Patch available CNA
• Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1775680262 Patch available CNA
• Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1775749857 Patch available CNA
• Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 2.4.0-1763656152 Patch available CNA
• Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
• Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA

• Fix · CNA libtiff Fixed in 4.6.0

Records fixed by the same vendor advisory or release, as the CNA lists them.

• Advisory · 2024-01-25

  Red Hat AI Inference Server 3.2, Red Hat Discovery 2 and 7 more products — RHSA-2025:20801

  2 records · Highest priority Priority HIGH · 1 HIGH, 1 LOW

  Other records, highest priority first

  • TI-2023-28738 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomPriority LOW 36
  Show all 2 records → Advisory →

1. 2026-10-02 Threatist record created from CVE-2023-52356
2. 2026-10-03 Alias added: GHSA-cx8g-4cf5-cjv3

• TI-2026-35991 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks KEVCVSS 3.1MEDIUM 6.5
• TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
• TI-2026-04544 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image CVSS 3.1HIGH 7.5
• TI-2026-04164 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVSS 3.1HIGH 7.8
• TI-2025-06293 Ai-inference-server: authentication bypass via unprotected inference endpoint in api CVSS 3.1MEDIUM 5.3

• CVE-2023-52356 · CVE Program
• CVE-2023-52356 · NVD
• FIRST EPSS
• GHSA-cx8g-4cf5-cjv3 · GitHub Advisory Database · CC BY 4.0
• CVE-2023-52356 · Red Hat security data · CC BY 4.0

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences