Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6 as used in applications that use ImageIO or AppKit allows remote attackers to execute arbitrary code via crafted TIFF images.