An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB.

An update of the libtiff package has been released.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49671 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

    Bug Fix(es) and Enhancement(s):

    * Reintroduce the `tiffcp -i` option [rhel-10.0.z] (JIRA:RHEL-185417)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43537 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41892 advisory.

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

    Bug Fix(es) and Enhancement(s):

    * Reintroduce the `tiffcp -i` option (JIRA:Rocky Linux-185328)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:41892 advisory.

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)
      * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image     (CVE-2026-12912)


    Bug Fix(es) and Enhancement(s):

      * Reintroduce the `tiffcp -i` option (JIRA:AlmaLinux-185328)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41892 advisory.

    - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189374)
    - make sure documentation is updated during build for CVE-2023-52355 (RHEL-178281)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41892 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    * libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image (CVE-2026-12912)

    Bug Fix(es) and Enhancement(s):

    * Reintroduce the `tiffcp -i` option (JIRA:RHEL-185328)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:20801 advisory.

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    * libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service     (CVE-2023-52356)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8709:04 advisory.

    * CVE-2023-52356: added proper validation and boundary checks to prevent the     SEGV and potential heap-buffer overflow
    * CVE-2023-52355: added functionality to set a maximum possible allocation size     in bytes in order to prevent out-of-memory issues when opening a TIFF file and     added memory limit option in tools     CVE(s):
    CVE-2023-52355     An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the     TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a     crafted input with a size smaller than 379 KB.
    CVE-2023-52356     A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11144:09 advisory.

    libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM     (CVE-2023-52355)         libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial     of service (CVE-2023-52356)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20801 advisory.

    - backport documentation change for CVE-2023-52355 (RHEL-17328)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0181 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-52355:
    An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the     TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a     crafted input with a size smaller than 379 KB.

    CVE-2023-52356:
    A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:20801 advisory.

    The libtiff packages contain a library of functions for manipulating Tagged Image File Format (TIFF)     files.

    Security Fix(es):

    * libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM (CVE-2023-52355)

    * libtiff: Segment fault in libtiff  in TIFFReadRGBATileExt() leading to denial of service     (CVE-2023-52356)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libtiff packages installed that are affected by multiple vulnerabilities:

  - A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users,     during install/upgrade workflow, to replace one of the Agent's executables before it can be executed. This     allows the user to elevate their permissions. (CVE-2023-0975)

  - processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g.,     WRITE of size 307203) via a crafted TIFF image. (CVE-2022-48281)

  - A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file     can lead to an out-of-bounds read in the extractImageSection function in tools/tiffcrop.c, resulting in a     denial of service and limited information disclosure. This issue affects libtiff versions 4.x.
    (CVE-2023-1916)

  - LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of     service (application crash) or possibly execute an arbitrary code via a crafted tiff image, which triggers     a heap-based buffer overflow. (CVE-2023-40745)

  - A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw     allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted     tiff image, which triggers a heap-based buffer overflow. (CVE-2023-41175)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0784 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-6277:
    An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a     remote attacker to cause a denial of service via a craft input with size smaller than 379 KB.

    CVE-2023-52356:
    A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service.

    CVE-2023-52355:
    An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the     TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a     crafted input with a size smaller than 379 KB.

    CVE-2023-6228:
    An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on     processing may cause a heap-based buffer overflow leads to an application crash.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has libtiff packages installed that are affected by multiple vulnerabilities:

  - A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to     the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading     to a denial of service. (CVE-2023-52356)

  - An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the     TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a     crafted input with a size smaller than 379 KB. (CVE-2023-52355)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the     TIFFRasterScanlineSize64() API. This flaw allows a remote attacker to cause a denial of service via a     crafted input with a size smaller than 379 KB. (CVE-2023-52355)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
333924	Photon OS 5.0: Libtiff PHSA-2024-5.0-92-0196	Nessus	PhotonOS Local Security Checks	Local	high
332498	Photon OS 5.0: Libtiff PHSA-2024-5.0-91-0196	Nessus	PhotonOS Local Security Checks	Local	high
332155	Photon OS 5.0: Libtiff PHSA-2024-5.0-90-0196	Nessus	PhotonOS Local Security Checks	Local	high
331736	RHEL 10 : libtiff (RHSA-2026:49671)	Nessus	Red Hat Local Security Checks	Local	high
329065	RHEL 9 : libtiff (RHSA-2026:43537)	Nessus	Red Hat Local Security Checks	Local	high
329049	RockyLinux 10 : libtiff (RLSA-2026:41892)	Nessus	Rocky Linux Local Security Checks	Local	high
328048	AlmaLinux 10 : libtiff (ALSA-2026:41892)	Nessus	Alma Linux Local Security Checks	Local	high
328019	Oracle Linux 10 : libtiff (ELSA-2026-41892)	Nessus	Oracle Linux Local Security Checks	Local	high
327900	RHEL 10 : libtiff (RHSA-2026:41892)	Nessus	Red Hat Local Security Checks	Local	high
316343	RockyLinux 9 : libtiff (RLSA-2025:20801)	Nessus	Rocky Linux Local Security Checks	Local	high
292856	MiracleLinux 7 : libtiff-4.0.3-35.0.1.el7.AXS7 (AXSA:2024-8709:04)	Nessus	Miracle Linux Local Security Checks	Local	high
283332	MiracleLinux 9 : libtiff-4.4.0-15.el9 (AXSA:2025-11144:09)	Nessus	Miracle Linux Local Security Checks	Local	high
276690	Oracle Linux 9 : libtiff (ELSA-2025-20801)	Nessus	Oracle Linux Local Security Checks	Local	high
275561	Alibaba Cloud Linux 3 : 0181: libtiff (ALINUX3-SA-2025:0181)	Nessus	Alibaba Cloud Linux Local Security Checks	Local	high
274775	RHEL 9 : libtiff (RHSA-2025:20801)	Nessus	Red Hat Local Security Checks	Local	high
242726	NewStart CGSL MAIN 7.02 : libtiff Multiple Vulnerabilities (NS-SA-2025-0128)	Nessus	NewStart CGSL Local Security Checks	Local	high
239578	TencentOS Server 4: libtiff (TSSA-2024:0784)	Nessus	Tencent Local Security Checks	Local	high
237995	NewStart CGSL MAIN 7.02 : libtiff Multiple Vulnerabilities (NS-SA-2025-0070)	Nessus	NewStart CGSL Local Security Checks	Local	high
227328	Linux Distros Unpatched Vulnerability : CVE-2023-52355	Nessus	Misc.	Local	high
204333	Photon OS 4.0: Libtiff PHSA-2024-4.0-0558	Nessus	PhotonOS Local Security Checks	Local	high
204151	Photon OS 5.0: Libtiff PHSA-2024-5.0-0196	Nessus	PhotonOS Local Security Checks	Local	high
203881	Photon OS 3.0: Libtiff PHSA-2024-3.0-0719	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2023-52355

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high