CLSA-2025-1757666692 libtiff: Fix of CVE-2017-9117

CVE-2017-9117: add checks for all BMP reading operations to avoid buffer overflow...

CVE-2017-9117

creationtimestamp| type| source ---|---|--- 2025-01-08 00:37:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/599...

SUSE CVE-2017-9117

In LibTIFF 4.0.6 and possibly other versions, the program processes BMP images without verifying that biWidth and biHeight in the bitmap-information header match the actual input, as demonstrated by a heap-based buffer over-read in bmp2tiff. NOTE: mentioning bmp2tiff does not imply that the...