CVE-2023-52355

HighCVSS 7.5/10Last modified Oct 2, 2026

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 25, 2024
Last modified
Oct 2, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-523567.5A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. ThCVE-2023-523577.5Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect CVE-2023-523586.2Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availabilitCVE-2023-523597.5Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnCVE-2023-52366.5A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficieCVE-2023-523607.5Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.CVE-2023-523617.5The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect inCVE-2023-523627.5Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523635.3Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may causCVE-2023-523646.3Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may CVE-2023-523655.3Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features tCVE-2023-523667.5Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features t
CVE-2023-52355: High severity, CVSS 7.5 | Vulnix