CVE-2018-18661

Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.0.9

Description: The issue is related to a NULL pointer dereference in the LZWDecode function. This can be exploited by a remote attacker using a specially crafted graphic file, potentially allowing the execution of arbitrary code or causing a denial of service.

Recommendations: For LibTIFF version 4.0.9, consider disabling the LZWDecode function as a temporary workaround until a patch is available. Restrict the use of LibTIFF to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.