Libtiff · Libtiff · CVE-2016-5314
**Name of the Vulnerable Software and Affected Versions**
LibTIFF versions 4.0.6 and earlier
**Description**
The issue is related to a buffer overflow in the `PixarLogDecode` function, located in the tif pixarlog.c file. This buffer overflow can be triggered by a crafted TIFF image, potentially allowing remote attackers to cause a denial of service, such as an application crash. It may also have other unspecified impacts, including the possibility of overwriting function pointers, for example, the `vgetparent` function pointer with `rgb2ycbcr`.
**Recommendations**
For LibTIFF versions 4.0.6 and earlier, update to a version later than 4.0.6 to resolve the issue.