libtiff 4.5.0 is vulnerable to Buffer Overflow in uv_encode() when libtiff reads a corrupted little-endian TIFF file and specifies the output to be big-endian. https://gitlab.com/libtiff/libtiff/-/issues/530 https://gitlab.com/libtiff/libtiff/-/merge_requests/473
Created iv tracking bugs for this issue: Affects: fedora-all [bug 2219255] Created libtiff tracking bugs for this issue: Affects: fedora-all [bug 2219257] Created mingw-libtiff tracking bugs for this issue: Affects: fedora-all [bug 2219258]
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2023:6575 https://access.redhat.com/errata/RHSA-2023:6575