CVE & CISA-KEV Catalog

CVE-2023-52356

HIGHEPSS 80th pctl
7.5
CVSS v3
NVD

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

CWE-122Heap-based Buffer OverflowCWE-787Out-of-bounds Write

How to fix

Remediation Available
tiffDebian
Fixed in:4.2.0-1+deb11u6CVE-2023-52356
Fixed in:4.5.0-6+deb12u2CVE-2023-52356
Fixed in:4.5.1+git230720-4CVE-2023-52356
Fixed in:4.5.1+git230720-4CVE-2023-52356
libtiffRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
libtiffRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
libtiff-debuginfoRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-debuginfoRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-debugsourceRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
libtiff-debugsourceRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
libtiff-develRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-develRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-toolsRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-toolsRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
libtiff-tools-debuginfoRocky
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
libtiff-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_1.2RHSA-2026:7081
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.6.0-6.el10_0.2RHSA-2026:7304
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.0.9-32.el8_10RHSA-2024:5079
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-15.el9RHSA-2025:20801
Fixed in:0:4.4.0-13.el9_6.3RHSA-2026:5958
registry.redhat.io/discovery/discoveryRocky
Fixed in:server-rhel9@sha256:97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503_amd64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:310df392f638ef6eca1a26db024ae2cb617db5932f886d2acddc92fb7289e740_arm64RHSA-2025:21994
Fixed in:server-rhel9@sha256:b4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3_arm64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:69cb9c84b806ee2f448bdbbcf3174855432f5caec8f31ca2a345655da4a72f57_amd64RHSA-2025:21994
registry.redhat.io/discovery/discoveryRed Hat / RHEL
Fixed in:server-rhel9@sha256:97a1bb076f7f29a5f2b80c4724cb27c4e87f89c2d73a7719c44dc8c044329503_amd64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:310df392f638ef6eca1a26db024ae2cb617db5932f886d2acddc92fb7289e740_arm64RHSA-2025:21994
Fixed in:server-rhel9@sha256:b4683720677a1e45efbfd291d8b130b530642221e8a55a49e931e1b8b2c81ac3_arm64RHSA-2025:21994
Fixed in:ui-rhel9@sha256:69cb9c84b806ee2f448bdbbcf3174855432f5caec8f31ca2a345655da4a72f57_amd64RHSA-2025:21994
registry.redhat.io/rhaiis/model-optRed Hat / RHEL
Fixed in:cuda-rhel9@sha256:20ab3684a275906dab8e67c09d3b86eadb6599aadf7247185a732aa4f96c0c00_arm64RHSA-2026:25096
Fixed in:cuda-rhel9@sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b_amd64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:66f80c8d4174118114a29773402ec00cc2f91149c7b2b19ad63910f775be7f53_amd64RHSA-2026:25096
Fixed in:cuda-rhel9@sha256:be6d568f28044533e4ad80f0856407c359e2eaf31a6b89cada433e6575d2300e_arm64RHSA-2026:8748
Fixed in:cuda-rhel9@sha256:d8ab90372d2d7968442a6dfa4f6ad04939e47f9b1299107d4a26565db25712bc_amd64RHSA-2026:8748
registry.redhat.io/rhaiis/model-optRocky
Fixed in:cuda-rhel9@sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b_amd64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:14e32e88f1b89f59ed34a6d712746b82a6a54c6ed4727784f18aeff853abbdc7_arm64RHSA-2025:23080
Fixed in:cuda-rhel9@sha256:66f80c8d4174118114a29773402ec00cc2f91149c7b2b19ad63910f775be7f53_amd64RHSA-2026:25096
Fixed in:cuda-rhel9@sha256:20ab3684a275906dab8e67c09d3b86eadb6599aadf7247185a732aa4f96c0c00_arm64RHSA-2026:25096
Fixed in:cuda-rhel9@sha256:be6d568f28044533e4ad80f0856407c359e2eaf31a6b89cada433e6575d2300e_arm64RHSA-2026:8748
Fixed in:cuda-rhel9@sha256:d8ab90372d2d7968442a6dfa4f6ad04939e47f9b1299107d4a26565db25712bc_amd64RHSA-2026:8748
registry.redhat.io/rhaiis/vllmRed Hat / RHEL
Fixed in:cuda-rhel9@sha256:dcb9d1cd005c40b6db6f893e56419e383b9dcc0d38315605cb1457e2af5354f7_amd64RHSA-2026:3461
Fixed in:cuda-rhel9@sha256:575090d65efcc6da0ea21e21484ac210357983e1c9031dfba8cf32a1b18b3c0a_amd64RHSA-2026:8746
Fixed in:cuda-rhel9@sha256:0ec114881d9dcd28a5dbbb2ec0ea1301ad87d5ae133121ce8167ef29d19802cc_arm64RHSA-2026:8746
Fixed in:rocm-rhel9@sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57_amd64RHSA-2025:23079
Fixed in:cuda-rhel9@sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f_arm64RHSA-2026:3461
Fixed in:spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64RHSA-2026:16174
Fixed in:spyre-rhel9@sha256:e272da91193f53a2a498734a0f83934e6e3cae260a9b78f18ba7954a3e4a1b50_s390xRHSA-2026:16174
Fixed in:cuda-rhel9@sha256:e38e15bab028956fd27190842e28f03fc76cb0d83c6326c875c577a570ce99a4_amd64RHSA-2026:7335
Fixed in:cuda-rhel9@sha256:54616c9f3e4d27120504b0b2020432ef3ff85286a50de7be842f05df0cfcd69e_arm64RHSA-2026:7335
Fixed in:cuda-rhel9@sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b_amd64RHSA-2025:23078
Fixed in:cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64RHSA-2025:23078
Fixed in:rocm-rhel9@sha256:813ba7ccd1696b44deb90d9e6cd8af114bdb47781eae7f27246a81fba062a892_amd64RHSA-2026:8747
Fixed in:rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64RHSA-2026:3462
Fixed in:spyre-rhel9@sha256:c79e06a3f71b81ddea9e9e4f51f378f4a5985b9f176e3d17953ffa7cd2b69823_ppc64leRHSA-2026:16174
registry.redhat.io/rhaiis/vllmRocky
Fixed in:cuda-rhel9@sha256:dcb9d1cd005c40b6db6f893e56419e383b9dcc0d38315605cb1457e2af5354f7_amd64RHSA-2026:3461
Fixed in:cuda-rhel9@sha256:575090d65efcc6da0ea21e21484ac210357983e1c9031dfba8cf32a1b18b3c0a_amd64RHSA-2026:8746
Fixed in:cuda-rhel9@sha256:0ec114881d9dcd28a5dbbb2ec0ea1301ad87d5ae133121ce8167ef29d19802cc_arm64RHSA-2026:8746
Fixed in:spyre-rhel9@sha256:b74a5cc403d0a07b0ef29808cef709121169582b69f2b9ff54a02d35b0cc0908_amd64RHSA-2026:16174
Fixed in:spyre-rhel9@sha256:e272da91193f53a2a498734a0f83934e6e3cae260a9b78f18ba7954a3e4a1b50_s390xRHSA-2026:16174
Fixed in:spyre-rhel9@sha256:c79e06a3f71b81ddea9e9e4f51f378f4a5985b9f176e3d17953ffa7cd2b69823_ppc64leRHSA-2026:16174
Fixed in:rocm-rhel9@sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57_amd64RHSA-2025:23079
Fixed in:cuda-rhel9@sha256:e38e15bab028956fd27190842e28f03fc76cb0d83c6326c875c577a570ce99a4_amd64RHSA-2026:7335
Fixed in:cuda-rhel9@sha256:54616c9f3e4d27120504b0b2020432ef3ff85286a50de7be842f05df0cfcd69e_arm64RHSA-2026:7335
Fixed in:cuda-rhel9@sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b_amd64RHSA-2025:23078
Fixed in:cuda-rhel9@sha256:ec961e5acfde5c1ad0a7e0e2c86a0bf56b9bc46357fa124f9db6dff1006076ab_arm64RHSA-2025:23078
Fixed in:rocm-rhel9@sha256:813ba7ccd1696b44deb90d9e6cd8af114bdb47781eae7f27246a81fba062a892_amd64RHSA-2026:8747
Fixed in:rocm-rhel9@sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a_amd64RHSA-2026:3462
Fixed in:cuda-rhel9@sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f_arm64RHSA-2026:3461
libtiff-toolsUbuntu
Fixed in:4.0.3-7ubuntu0.11+esm12USN-6644-1
Fixed in:4.0.6-1ubuntu0.8+esm15USN-6644-1
Fixed in:4.0.9-5ubuntu0.10+esm5USN-6644-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.12USN-6644-1
Fixed in:4.3.0-6ubuntu0.8USN-6644-2
Fixed in:4.5.1+git230720-1ubuntu1.1USN-6644-1
libtiff5Ubuntu
Fixed in:4.0.3-7ubuntu0.11+esm12USN-6644-1
Fixed in:4.0.6-1ubuntu0.8+esm15USN-6644-1
Fixed in:4.0.9-5ubuntu0.10+esm5USN-6644-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.12USN-6644-1
Fixed in:4.3.0-6ubuntu0.8USN-6644-2
libtiff6Ubuntu
Fixed in:4.5.1+git230720-1ubuntu1.1USN-6644-1
tiffUbuntu
Fixed in:4.0.3-7ubuntu0.11+esm12USN-6644-1
Fixed in:4.0.6-1ubuntu0.8+esm15USN-6644-1
Fixed in:4.0.9-5ubuntu0.10+esm5USN-6644-1
Fixed in:4.1.0+git191117-2ubuntu0.20.04.12USN-6644-1
Fixed in:4.3.0-6ubuntu0.8USN-6644-2
Fixed in:4.5.1+git230720-1ubuntu1.1USN-6644-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

2.19%probability of exploitation in 30 days
80thpercentile

Elevated risk: more likely to be exploited than 80% of all known CVEs.

References

Related Vulnerabilities

Other CWE-122 (Heap-based Buffer Overflow) vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2015-3113Critical9.8100%KEVFix
CVE-2024-26256High7.888%-Fix
CVE-2020-25687Medium5.987%-Fix
CVE-2009-3459High8.886%KEVFix
CVE-2021-21017High8.886%KEV-
CVE-2020-25683Medium5.986%-Fix
Embed a live status badge for CVE-2023-52356
CVE-2023-52356 severity badge

Markdown

[![CVE-2023-52356](https://tridentstack.com/cve/badge/CVE-2023-52356.svg)](https://tridentstack.com/cve/CVE-2023-52356)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-52356"><img src="https://tridentstack.com/cve/badge/CVE-2023-52356.svg" alt="CVE-2023-52356"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-10.