7.5
High
CVE-2023-52355 An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the…
Description
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat AI Inference Server 3.2 1772160625 | earliest → < 1772160625 | 1772160625 |
| Red Hat Discovery 2 2.4 | earliest → < 2.4.0-1763656152 | 2.4.0-1763656152 |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat OpenShift AI 3.2 1790703494 | earliest → < 1790703494 | 1790703494 |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat OpenShift AI 3.0 1790276974 | earliest → < 1790276974 | 1790276974 |
| Red Hat OpenShift AI 3.4 1790703542 | earliest → < 1790703542 | 1790703542 |
Other CVEs of Red Hat Enterprise Linux 9
The 1866 CVEs of Red Hat Enterprise Linux 9 →
CVE-2026-123876
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
4.4
Medium
CVE-2026-120749
Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
6.2
Medium
CVE-2026-123037
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
6.7
Medium
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Not rated