Denial Of Service (DoS)

libtiff.so is vulnerable to Denial of Service. The vulnerability is caused by the TIFFReadDirEntryArrayWithLimit and EstimateStripByteCounts functions in tif_dirread.c failing to verify if the requested memory size was greater than the actual file size due to allocating memory based on the size of data specified in the TIFF file metadata. An attacker can craft TIFF file to the TIFFOpen() API which allows a remote attacker to cause a Denial of Service via a crafted input with a size smaller than 379 KB.