CVE-2023-52356: Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-01-25 · updated 2026-10-28
Weakness: CWE-122

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Affected products

Apple iPadOS: before 16.7.9; from 17.0 before 17.6 — fixed in 16.7.9, 17.6
Apple Iphone Os: before 16.7.9; from 17.0 before 17.6 — fixed in 16.7.9, 17.6
Apple macOS: before 12.7.6; from 13.0 before 13.6.8; from 14.0 before 14.6 — fixed in 12.7.6, 13.6.8, 14.6
Apple tvOS: before 17.6 — fixed in 17.6
Apple visionOS: before 1.3 — fixed in 1.3
Apple watchOS: before 10.6 — fixed in 10.6
Debian Linux: 10.0, 11.0 (and their updates)
libtiff: before 4.6.0 — fixed in 4.6.0
Red Hat AI Inference Server: from 3.2.0 before 3.2.2; 3.3.0 (and their updates) — fixed in 3.2.2
RedHat Codeready Linux Builder: 8.0, 9.0, 10.0 (and their updates)
RedHat Codeready Linux Builder Eus: 9.6, 10.0 (and their updates)
RedHat Discovery: 2.0 (and their updates)
Red Hat Enterprise Linux: 6.0, 7.0, 8.0, 9.0, 10.0 (and their updates)
RedHat Enterprise Linux Eus: 9.6, 10.0 (and their updates)

How to fix

Upgrade to a fixed version: Apple iPadOS 16.7.9, 17.6; Apple Iphone Os 16.7.9, 17.6; Apple macOS 12.7.6, 13.6.8, 14.6; Apple tvOS 17.6; Apple visionOS 1.3; Apple watchOS 10.6; libtiff 4.6.0; Red Hat AI Inference Server 3.2.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-52356 or the next vulnerability affects your stack