cve/2023/CVE-2023-52356.md

CVE-2023-52356

Description

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

POC

Reference

• http://seclists.org/fulldisclosure/2024/Jul/16
• http://seclists.org/fulldisclosure/2024/Jul/17
• http://seclists.org/fulldisclosure/2024/Jul/18
• http://seclists.org/fulldisclosure/2024/Jul/19
• https://gitlab.com/libtiff/libtiff/-/issues/622

Github

• https://github.com/NaInSec/CVE-LIST
• https://github.com/PromptFuzz/PromptFuzz
• https://github.com/fkie-cad/nvd-json-data-feeds