libtiff < 4.0.3 - Denial of Service and Possible Remote Code Execution via GIF LZW Decompression
The LZW decompressor in the gif2tiff tool in libtiff 4.0.3 and earlier allows context-dependent attackers to cause a denial of service (out-of-bounds write and crash) or possibly execute arbitrary code via a crafted GIF image.