ROS-20230621-02

A vulnerability in the LZWDecode() function of the LibTIFF library is related to a null pointer dereferencing error in the
libtiff/tif_lzw.c file. Exploitation of the vulnerability could allow an attacker to create certain
input data that could cause a program to dereference a NULL pointer when decompressing a TIFTIFF file.
unpacking a TIFF file, resulting in a program crash or denial of service.

The LibTIFF library vulnerability is related to a boundary error in the extractContigSamples32bits() function in the file
tiffcrop.c. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
a heap buffer overflow.

The vulnerability in the LibTIFF library is related to a boundary error associated with the values of TIFFTAG_INKNAMES
and TIFFTAG_NUMBEROFINKS. Exploitation of the vulnerability could allow an attacker acting remotely,
to cause a heap buffer overflow.