Denial Of Service (DoS) During TIFFOpen Process

libtiff.so is vulnerable to denial of service DoS. When the attacker can send a malicious input file, tdimagelength is directly derived from the input file length. Moreover, TIFFOpen function does not check tdimagelength during TIFFOpen process, allowing the attacker to trigger out-of-memory OOM...