Skip to main content

Out-of-bounds Write

CVE-2023-52355

High
7.5/10

Summary

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the "TIFFRasterScanlineSize64()" API. This flaw allows a remote attacker to cause a Denial-of-Service (DoS) attack via a crafted input with a size smaller than 379 KB.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published