Vishal Chauhan

A denial of service issue exists in the way Windows handles objects in memory. An attacker who successfully exploits this could cause a target system to stop responding.

The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a JPEG file with a specific TIFFTAG JPEGTABLES length.

The issue is related to out-of-bounds write vulnerabilities in heap allocated buffers. Specifically, the `t2p process jpeg strip()` function is affected. This could potentially lead to exploitation, although no specific details about the estimated number of affected devices or real-world incidents are provided.

The issue is related to out-of-bounds write vulnerabilities in buffers within the tools/tiffcrop.c file of libtiff.

The issue is related to out-of-bounds write vulnerabilities in heap allocated buffers, specifically in the tif pixarlog.c file. This can lead to a heap-buffer-overflow, which has been reported as "PixarLog horizontalDifference heap-buffer-overflow."

The issue is related to an out-of-bounds write on tiled images with odd tile width versus image width. This can lead to a heap-buffer-overflow.

The issue is related to an out-of-bounds read in the `readContigTilesIntoBuffer()` function.

The issue is related to the error code path of TIFFFlushData1() in tif write.c, which did not reset the `tif rawcc` and `tif rawcp` members, leading to a heap-buffer-overflow.