# CVE-2023-52356: ImageIO: Processing an image may lead to a denial-of-service CVE-2023-52356 is fixed in 16 products on 2 platforms, first by libtiff-opengl 4.0.9-5ubuntu0.10+esm5, released January 25, 2024. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2023-52356 - Priority: High - CVSS: 7.5 (HIGH) - EPSS: 0.0251 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 25, 2024 - Vendor advisory: https://support.apple.com/en-us/120911 ## Description This is a vulnerability in open source code and Apple Software is among the affected projects. The ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | macOS | Monterey | 12.7.6 | [Monterey 12.7.6](https://patchblox.com/security/data/fix/macos/monterey-12.7.6.md) | Jul 29, 2024 | | macOS | Sonoma | 14.6 | [Sonoma 14.6](https://patchblox.com/security/data/fix/macos/sonoma-14.6.md) | Jul 29, 2024 | | macOS | Ventura | 13.6.8 | [Ventura 13.6.8](https://patchblox.com/security/data/fix/macos/ventura-13.6.8.md) | Jul 29, 2024 | | Linux | libtiff RHEL 8 | 0:4.0.9-32.el8_10 | [RHSA-2024:5079](https://patchblox.com/security/data/fix/linux/rhsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff RHEL 9 | 0:4.4.0-15.el9 | [RHSA-2025:20801](https://patchblox.com/security/data/fix/linux/rhsa-2025-20801.md) | Nov 11, 2025 | | Linux | libtiff almalinux 10 | 4.6.0-6.el10_1.2 | [ALSA-2026:7081](https://patchblox.com/security/data/fix/linux/alsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff almalinux 8 | 4.0.9-32.el8_10 | [ALSA-2024:5079](https://patchblox.com/security/data/fix/linux/alsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff ol 10 | 0:4.6.0-6.el10_1.2 | [ELSA-2026-7081](https://patchblox.com/security/data/fix/linux/elsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff ol 8 | 0:4.0.9-32.el8_10 | [ELSA-2024-5079](https://patchblox.com/security/data/fix/linux/elsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff ol 9 | 0:4.4.0-15.el9 | [ELSA-2025-20801](https://patchblox.com/security/data/fix/linux/elsa-2025-20801.md) | Nov 17, 2025 | | Linux | libtiff rocky 10 | 0:4.6.0-6.el10_1.2 | [RLSA-2026:7081](https://patchblox.com/security/data/fix/linux/rlsa-2026-7081.md) | Apr 10, 2026 | | Linux | libtiff rocky 8 | 0:4.0.9-32.el8_10 | [RLSA-2024:5079](https://patchblox.com/security/data/fix/linux/rlsa-2024-5079.md) | Aug 21, 2024 | | Linux | libtiff rocky 9 | 0:4.4.0-15.el9_7.2.0.1 | [RLSA-2025:20801](https://patchblox.com/security/data/fix/linux/rlsa-2025-20801.md) | May 21, 2026 | | Linux | libtiff-debuginfo amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff-debugsource amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff-devel RHEL 8 | 0:4.0.9-32.el8_10 | [RHSA-2024:5079](https://patchblox.com/security/data/fix/linux/rhsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-devel RHEL 9 | 0:4.4.0-15.el9 | [RHSA-2025:20801](https://patchblox.com/security/data/fix/linux/rhsa-2025-20801.md) | Nov 11, 2025 | | Linux | libtiff-devel almalinux 10 | 4.6.0-6.el10_1.2 | [ALSA-2026:7081](https://patchblox.com/security/data/fix/linux/alsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff-devel almalinux 8 | 4.0.9-32.el8_10 | [ALSA-2024:5079](https://patchblox.com/security/data/fix/linux/alsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-devel amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff-devel ol 10 | 0:4.6.0-6.el10_1.2 | [ELSA-2026-7081](https://patchblox.com/security/data/fix/linux/elsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff-devel ol 8 | 0:4.0.9-32.el8_10 | [ELSA-2024-5079](https://patchblox.com/security/data/fix/linux/elsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-devel ol 9 | 0:4.4.0-15.el9 | [ELSA-2025-20801](https://patchblox.com/security/data/fix/linux/elsa-2025-20801.md) | Nov 17, 2025 | | Linux | libtiff-opengl Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10+esm5 | [libtiff-opengl 4.0.9-5ubuntu0.10+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtiff-opengl-4.0.9-5ubuntu0.10-esm5.md) | Jan 25, 2024 | | Linux | libtiff-opengl Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.12 | [libtiff-opengl 4.1.0+git191117-2ubuntu0.20.04.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtiff-opengl-4.1.0-git191117-2ubuntu0.20.04.12.md) | Jan 25, 2024 | | Linux | libtiff-opengl Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.8 | [libtiff-opengl 4.3.0-6ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtiff-opengl-4.3.0-6ubuntu0.8.md) | Jan 25, 2024 | | Linux | libtiff-opengl Ubuntu 24.04.5 LTS (noble) | 4.5.1+git230720-4ubuntu1 | [libtiff-opengl 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtiff-opengl-4.5.1-git230720-4ubuntu1.md) | Jan 25, 2024 | | Linux | libtiff-opengl Ubuntu 24.10 (oracular) | 4.5.1+git230720-4ubuntu1 | [libtiff-opengl 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtiff-opengl-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiff-opengl Ubuntu 25.04 (plucky) | 4.5.1+git230720-4ubuntu1 | [libtiff-opengl 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtiff-opengl-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiff-static amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff-tools RHEL 8 | 0:4.0.9-32.el8_10 | [RHSA-2024:5079](https://patchblox.com/security/data/fix/linux/rhsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-tools RHEL 9 | 0:4.4.0-15.el9 | [RHSA-2025:20801](https://patchblox.com/security/data/fix/linux/rhsa-2025-20801.md) | Nov 11, 2025 | | Linux | libtiff-tools Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10+esm5 | [libtiff-tools 4.0.9-5ubuntu0.10+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtiff-tools-4.0.9-5ubuntu0.10-esm5.md) | Jan 25, 2024 | | Linux | libtiff-tools Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.12 | [libtiff-tools 4.1.0+git191117-2ubuntu0.20.04.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtiff-tools-4.1.0-git191117-2ubuntu0.20.04.12.md) | Jan 25, 2024 | | Linux | libtiff-tools Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.8 | [libtiff-tools 4.3.0-6ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtiff-tools-4.3.0-6ubuntu0.8.md) | Jan 25, 2024 | | Linux | libtiff-tools Ubuntu 24.04.5 LTS (noble) | 4.5.1+git230720-4ubuntu1 | [libtiff-tools 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtiff-tools-4.5.1-git230720-4ubuntu1.md) | Jan 25, 2024 | | Linux | libtiff-tools Ubuntu 24.10 (oracular) | 4.5.1+git230720-4ubuntu1 | [libtiff-tools 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtiff-tools-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiff-tools Ubuntu 25.04 (plucky) | 4.5.1+git230720-4ubuntu1 | [libtiff-tools 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtiff-tools-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiff-tools almalinux 10 | 4.6.0-6.el10_1.2 | [ALSA-2026:7081](https://patchblox.com/security/data/fix/linux/alsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff-tools almalinux 8 | 4.0.9-32.el8_10 | [ALSA-2024:5079](https://patchblox.com/security/data/fix/linux/alsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-tools amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff-tools ol 10 | 0:4.6.0-6.el10_1.2 | [ELSA-2026-7081](https://patchblox.com/security/data/fix/linux/elsa-2026-7081.md) | Apr 8, 2026 | | Linux | libtiff-tools ol 8 | 0:4.0.9-32.el8_10 | [ELSA-2024-5079](https://patchblox.com/security/data/fix/linux/elsa-2024-5079.md) | Aug 7, 2024 | | Linux | libtiff-tools ol 9 | 0:4.4.0-15.el9 | [ELSA-2025-20801](https://patchblox.com/security/data/fix/linux/elsa-2025-20801.md) | Nov 17, 2025 | | Linux | libtiff-tools-debuginfo amzn 2023 | 4.4.0-4.amzn2023.0.18 | [ALAS2023-2024-525](https://patchblox.com/security/data/fix/linux/alas2023-2024-525.md) | Feb 15, 2024 | | Linux | libtiff5 Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10+esm5 | [libtiff5 4.0.9-5ubuntu0.10+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtiff5-4.0.9-5ubuntu0.10-esm5.md) | Jan 25, 2024 | | Linux | libtiff5 Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.12 | [libtiff5 4.1.0+git191117-2ubuntu0.20.04.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtiff5-4.1.0-git191117-2ubuntu0.20.04.12.md) | Jan 25, 2024 | | Linux | libtiff5 Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.8 | [libtiff5 4.3.0-6ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtiff5-4.3.0-6ubuntu0.8.md) | Jan 25, 2024 | | Linux | libtiff6 Ubuntu 24.04.5 LTS (noble) | 4.5.1+git230720-4ubuntu1 | [libtiff6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtiff6-4.5.1-git230720-4ubuntu1.md) | Jan 25, 2024 | | Linux | libtiff6 Ubuntu 24.10 (oracular) | 4.5.1+git230720-4ubuntu1 | [libtiff6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtiff6-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiff6 Ubuntu 25.04 (plucky) | 4.5.1+git230720-4ubuntu1 | [libtiff6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtiff6-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiffxx5 Ubuntu 18.04.6 LTS (bionic) | 4.0.9-5ubuntu0.10+esm5 | [libtiffxx5 4.0.9-5ubuntu0.10+esm5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libtiffxx5-4.0.9-5ubuntu0.10-esm5.md) | Jan 25, 2024 | | Linux | libtiffxx5 Ubuntu 20.04 LTS (focal) | 4.1.0+git191117-2ubuntu0.20.04.12 | [libtiffxx5 4.1.0+git191117-2ubuntu0.20.04.12](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libtiffxx5-4.1.0-git191117-2ubuntu0.20.04.12.md) | Jan 25, 2024 | | Linux | libtiffxx5 Ubuntu 22.04.1 LTS (jammy) | 4.3.0-6ubuntu0.8 | [libtiffxx5 4.3.0-6ubuntu0.8](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libtiffxx5-4.3.0-6ubuntu0.8.md) | Jan 25, 2024 | | Linux | libtiffxx6 Ubuntu 24.04.5 LTS (noble) | 4.5.1+git230720-4ubuntu1 | [libtiffxx6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libtiffxx6-4.5.1-git230720-4ubuntu1.md) | Jan 25, 2024 | | Linux | libtiffxx6 Ubuntu 24.10 (oracular) | 4.5.1+git230720-4ubuntu1 | [libtiffxx6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-libtiffxx6-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | libtiffxx6 Ubuntu 25.04 (plucky) | 4.5.1+git230720-4ubuntu1 | [libtiffxx6 4.5.1+git230720-4ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libtiffxx6-4.5.1-git230720-4ubuntu1.md) | Jan 16, 2026 | | Linux | tiff Debian 12.15 (bookworm) | 4.5.0-6+deb12u2 | [DEBIAN-CVE-2023-52356](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52356.md) | Jan 25, 2024 | | Linux | tiff Debian 13.5 (trixie) | 4.5.1+git230720-4 | [DEBIAN-CVE-2023-52356](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52356.md) | Jan 25, 2024 | | Linux | tiff Debian 14 | 4.5.1+git230720-4 | [DEBIAN-CVE-2023-52356](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52356.md) | Jan 25, 2024 | | Linux | tiff opensuse-leap 15.6 | 4.7.0-150600.3.8.1 | [SUSE-SU-2025:0753-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0753-1.md) | Feb 28, 2025 | | Linux | tiff sles 15.6 | 4.7.0-150600.3.8.1 | [SUSE-SU-2025:0753-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-0753-1.md) | Feb 28, 2025 | --- Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.