A null pointer dereference vulnerability exists in libtiff via the tif_dirinfo.c component. This flaw can cause an application crash due to a segmentation fault, potentially leading to denial of service. The issue arises when memory allocation failures are triggered, for example, by restricting heap space or injecting faults. Red Hat has issued a security update addressing this vulnerability in their Enterprise Linux 9.2 Extended Update Support packages.