Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c

An attacker crafts a malicious TIFF file that, when processed by the `tiffcp` utility, triggers a heap-based buffer overflow in the `cpStripToTile()` function [ref_id=1]. The overflow occurs during the copying of strip data to tile data without proper bounds checking. This can cause the application to crash, resulting in a denial of service.

The vulnerability resides in the `cpStripToTile()` function in `tools/tiffcp.c` of the libtiff package. A crafted TIFF file processed by the `tiffcp` utility triggers a heap-based buffer overflow, leading to an application crash.

The advisory does not include a patch diff, but the fix addresses the missing bounds validation in `cpStripToTile()` that allowed the heap buffer overflow [ref_id=1]. The update ensures that when copying strip data into a tile buffer, the size of the destination buffer is properly checked against the amount of data being written. This prevents writes beyond the allocated heap memory.