CVE-2023-52355

High

Open

TLP:CLEAR

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

NVD CVE.org

DDoS

AI Analysis

No AI analysis yet.

Description

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 1.83%

76.9th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Confidence: 90%
Published: Jan 25, 2024
Last Modified: Aug 3, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.