Libtiff · Libtiff · CVE-2018-5360
**Name of the Vulnerable Software and Affected Versions**
LibTIFF versions prior to 4.0.6
GraphicsMagick version 1.3.27
**Description**
The issue is related to the mishandling of TIFF files, specifically a heap-based buffer over-read in the `ReadTIFFImage` function in `coders/tiff.c`.
**Recommendations**
For LibTIFF versions prior to 4.0.6, update to version 4.0.6 or later.
For GraphicsMagick version 1.3.27, consider disabling the `ReadTIFFImage` function in `coders/tiff.c` until a patch is available.