CVE-2016-3625

Name of the Vulnerable Software and Affected Versions LibTIFF versions 4.0.6 and earlier

Description The issue allows a remote attacker to cause a denial of service via a crafted TIFF image. This is due to an out-of-bounds read in the tif read.c file of the tiff2bw tool in LibTIFF.

Recommendations For LibTIFF versions 4.0.6 and earlier, consider disabling the tiff2bw tool until a patch is available to prevent potential denial of service attacks. Restrict access to the tif read.c function to minimize the risk of exploitation. Avoid using the tiff2bw tool with untrusted TIFF images until the issue is resolved.