In ImageMagick 7.0.8-43 Q16 there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.