CVE-2023-52355

Summary

CVE-2023-52355 is a newly discovered vulnerability in the libtiff library. It is an out-of-memory issue that can be exploited when the TIFFRasterScanlineSize64() API is called with a specially crafted TIFF file. An attacker can cause a denial of service by providing an input smaller than 379 KB. The flaw allows the attacker to exhaust the target system's memory, leading to a crash or unresponsiveness. This vulnerability poses a significant risk to systems that handle TIFF files and could be used for disruptive attacks. Administrators are advised to update their libtiff libraries to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.