Posted by Ron E on Sep 30A heap buffer overflow vulnerability exists in the geotifcp utility, distributed as part of libgeotiff. The flaw occurs in the function cpContig2ContigByRow_8_to_4 when processing TIFF images with an odd ImageWidth and using the -d option (downsampling from 8-bit to 4-bit). During conversion, the function iterates over pixels in pairs and always accesses buf_in[i_in+1]. When the width is odd, the last iteration dereferences one byte past the...