Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image.
Exploitability
AV:NAC:LAu:SImpact
C:PI:PA:P6.5/AV:N/AC:L/Au:S/C:P/I:P/A:P