CVE-2023-29407

mediumpriority · track · 26EPSS 0.009 · 59 %ileDEEUNLRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.87% (59th) EPSS

CVSS 6.5 · medium

Is it mine?

28 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.16.5mediumAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · OSV

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-834USprimaryCWE-834USCWE-834USCWE-834US

affected products (28)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Fedora Linuxall versionscert_bundDEcpe:/o:fedoraproject:fedora:-
Golang Goall versionscert_bundDEcpe:/a:golang:go:-
IBM App Connect Enterpriseall versionscert_bundDEcpe:/a:ibm:app_connect_enterprise:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShift Container Platform <4.12.48all versionscert_bundDE
SUSE Managerall versionscert_bundDEcpe:/a:suse:manager:-
Splunk Splunk Enterprise <9.1.6all versionscert_bundDE
Splunk Splunk Enterprise <9.2.3all versionscert_bundDE
Splunk Splunk Enterprise <9.3.1all versionscert_bundDE
Ubuntu Linuxall versionscert_bundDEcpe:/o:canonical:ubuntu_linux:-
Red Hat OpenShift≤ Container Platform <4.12.48cert_bundDE
Splunk Splunk Enterprise< 9.1.6cert_bundDE
Splunk Splunk Enterprise< 9.2.3cert_bundDE
Splunk Splunk Enterprise< 9.3.1cert_bundDE
golang.org/x/image golang.org/x/image/tiff0 → 0.10.0enisa_euvdEU
Fedora Project Fedora≤ 38fstec_bduRU
Fedora Project Fedora≤ 37fstec_bduRU
Fedora Project Fedora≤ 39fstec_bduRU

showing 20 of 28

advisories (4)

Vendor and ecosystem advisories describing this.

NCSC-2025-0021Kwetsbaarheden verholpen in Oracle CommunicationsNL2025-01-22csaf · ncsc_nlNL
Oracle heeft meerdere kwetsbaarheden verholpen in zijn Communicatieproducten, waaronder Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Network Function en Oracle Communications Order and Service Management.
WID-SEC-W-2023-1938Golang Go: Mehrere SchwachstellenDeutsch2023-08-01csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen Denial of Service Angriff durchzuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.
GHSA-j3p8-6mrq-6g7hGolang TIFF decoder vulnerable to excessive CPU consumption2023-08-02ghsa · osvUS
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.
GO-2023-1990Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff2023-08-02vendor · osvUS
A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size (width * height) appearing to be zero.

also known as (6)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund ncsc_nl NVD CVE.org MITRE

published 2023-08-02modified 2026-06-17

related (140)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2017-12587US	high8.8	2.03% (81st)	—	2017-08-06
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
CVE-2021-35515US	high7.5	11.6% (96th)	—	2021-07-13
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of…
CVE-2023-30226US	medium5.5	0.35% (29th)	Exploit	2023-07-12
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.
CVE-2021-39924US	high7.5	5.29% (93rd)	—	2021-11-19
Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVE-2023-38200US	high7.5	1.45% (73rd)	—	2023-07-24
A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This flaw allows an attacker…

+135 more

references (23)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan