Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the putcontig8bitYCbCr44tile, putcontig8bitYCbCr12tile, putcontig8bitYCbCr22tile and putcontig8bitYCbCr42tile functions. An attacker can cause an out-of-bounds heap write, potentially leading to...

OSV-2020-1232 Use-of-uninitialized-value in TIFFYCbCrtoRGB

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16844 Crash type: Use-of-uninitialized-value Crash state: TIFFYCbCrtoRGB putcontig8bitYCbCr22tile gtTileContig...