A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash, potential information disclosure or any other context-dependent impact

LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference in the memcpy() function in TIFFReadDirectory() in tifdirread.c. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

LibTIFF is vulnerable to a denial of service, caused by a NULL pointer dereference in memcpy() function in TIFFFetchStripThing() in tifdirread.c. A local authenticated attacker could exploit this vulnerability to cause a denial of service.

libtiff is vulnerable to a denial of service, caused by NULL pointer dereference in tifunix.c. By persuading a victim to open a specially-crafted TIFF file, a remote attacker could exploit this vulnerability to cause a denial of service.

LibTIFF 4.3.0 has an out-of-bounds read in TIFFmemcpy in tifunix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field.