This vulnerability involves an integer overflow in the cvtRaster() function of the libtiff rgb2ycbcr utility. When processing a specially crafted TIFF image, the calculation of strip buffer sizes can overflow, resulting in an allocation smaller than required. This leads to a heap-based buffer overflow during the YCbCr color space conversion process. The issue could potentially allow memory corruption, but no further impact details or exploitation techniques are provided. No CVSS score or vendor remediation information is currently available.

The integer overflow causes an undersized heap allocation, which leads to a heap-based buffer overflow during image processing. This can result in memory corruption, which may be exploitable for denial of service or potentially arbitrary code execution depending on the context. However, no known exploits or detailed impact scenarios are documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or specially crafted TIFF images with the affected libtiff rgb2ycbcr utility to reduce risk.