Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service

Summary

A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.

Timeline

1. Jan 25, 2024, 8:03 PM UTCCVE published
2. Jan 28, 2024, 1:27 AM UTCCISA SSVC assessment

   Exploitation: poc · Automatable: yes · Technical impact: partial

3. Jun 10, 2026, 5:33 PM UTCRecord last updated

Affected versions

• libtiff

  fixed in 4.6.0

• libtiff

  Version range not reported

• libtiff

  Version range not reported

• libtiff

  Version range not reported

• libtiff

  Version range not reported

• libtiff

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-spyre-rhel9

  Version range not reported

• rhaiis/vllm-cuda-rhel9

  Version range not reported

• rhaiis/vllm-rocm-rhel9

  Version range not reported

• rhaiis/model-opt-cuda-rhel9

  Version range not reported

• discovery/discovery-ui-rhel9

  Version range not reported

• libtiff

  Version range not reported

• compat-libtiff3

  Version range not reported

• libtiff

  Version range not reported

• compat-libtiff3

  Version range not reported

References 22