CVE Catalog
CVE-2016-9539
CriticalSummary
The libtiff library version 4.0.6 has an out-of-bounds read in the readContigTilesIntoBuffer() function.
Risk Assessment
An attacker may exploit this vulnerability to read data outside of the allocated buffer, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update the libtiff library to the latest version to mitigate this vulnerability.
Original NVD description (English source)
tools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer(). Reported as MSVR 35092.