libtiff buffer overflow vulnerability (CNVD-2022-72103)

LibTIFF is a library for reading and writing TIFF (Tagged Image File Format) files. The library contains a number of command-line tools for working with TIFF files.The LibTIFF tiffcrop utility suffers from a buffer overflow vulnerability that stems from having a uint32_t underflow that could lead to out-of-bounds reads and writes. An attacker could exploit this vulnerability by serving a crafted file to tiffcrop (by tricking the user into running tiffcrop on it with certain parameters) which could lead to a crash or in some cases further exploitation.