Su Laus

**Name of the Vulnerable Software and Affected Versions** libtiff version 4.5.0 **Description** The issue is caused by a buffer overflow on the stack in the uv encode() function of the LibTIFF library. This can occur when the library reads a corrupted little-endian TIFF file and specifies the output to be big-endian. Exploitation of this issue may allow an attacker to cause a denial of service. **Recommendations** For libtiff version 4.5.0, consider disabling the uv encode() function as a temporary workaround until a patch is available to prevent potential exploitation when reading corrupted little-endian TIFF files and specifying big-endian output.