Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API. This flaw allows a remote attacker to cause a heap-buffer overflow, leading to a denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-01 | 1 | Disclosure1 |
| 2026-04-10 | 1 | General1 |
libtiff CVE-2023-52356 crashes apps with a single malicious TIFF. Still unpatched on many Rocky/Ubuntu/SUSE boxes. Read more: 👉 https://tinyurl.com/2sphv8h8 #RockyLinux https://t.co/Bl7KOquKbn
Post summary
CVE‑2023‑52356 causes application crashes when processing a single malicious TIFF file; many systems have not yet applied a patch, though no exploit tools, PoC, or active exploitation activity are described.
🟠 ONNX, Path Traversal via Symlink, #CVE-2023-52356 (Medium) https://dailycve.com/onnx-path-traversal-via-symlink-cve-2023-52356-medium/
Post summary
The post announces a path traversal vulnerability in ONNX via symbolic links (CVE‑2023‑52356), indicating medium severity and linking to a dailyCVE article for details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | libtiff | libtiff | - | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |