CVE-2016-5316 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Out-of-bounds read in the PixarLogCleanup function in tif_pixarlog.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application by sending a crafted TIFF image to the rgb2ycbcr tool.