tif_read.c in the tiff2bw tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF image.
https://security.gentoo.org/glsa/201701-16
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-4651