CVE-2023-52356

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Jan 25, 2024
Last modified
Jun 17, 2026
NVD status
Undergoing Analysis

Related CVEs from 2023

CVE-2023-523577.5Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect CVE-2023-523586.2Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availabilitCVE-2023-523597.5Vulnerability of permission verification in some APIs in the ActivityTaskManagerService module. Impact: Successful exploitation of this vulnCVE-2023-52366.5A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficieCVE-2023-523607.5Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.CVE-2023-523617.5The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect inCVE-2023-523627.5Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.CVE-2023-523635.3Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may causCVE-2023-523646.3Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of this vulnerability may CVE-2023-523655.3Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features tCVE-2023-523667.5Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features tCVE-2023-523677.7Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availa
CVE-2023-52356: High severity, CVSS 7.5 | Vulnix