CVE-2018-15209

Name of the Vulnerable Software and Affected Versions LibTIFF version 4.0.9

Description The issue allows remote attackers to cause a denial of service, which is a heap-based buffer overflow and application crash, or possibly have other unspecified impacts via a crafted TIFF file. This can be demonstrated using tiff2pdf.

Recommendations For LibTIFF version 4.0.9, update to a version that fixes the issue in the ChopUpSingleUncompressedStrip function in tif dirread.c to prevent a heap-based buffer overflow and application crash. As a temporary workaround, consider restricting the processing of crafted TIFF files to minimize the risk of exploitation.