https://github.com/ImageMagick/ImageMagick/issues/1375

diff --git a/coders/tiff.c b/coders/tiff.c
index 3f9105438d5f4e83f9e9df4d5a9857626733caa5..31f36b7e8b48e4c88a95e5e6fac2938ce3b71812 100644 (file)
--- a/coders/tiff.c
+++ b/coders/tiff.c
@@ -1782,7 +1782,7 @@ RestoreMSCWarning
     quantum_type=RGBQuantum;
     if (TIFFScanlineSize(tiff) <= 0)
       ThrowTIFFException(ResourceLimitError,"MemoryAllocationFailed");
-    if (((MagickSizeType) TIFFScanlineSize(tiff)) > GetBlobSize(image))
+    if (((MagickSizeType) TIFFScanlineSize(tiff)) > (2*GetBlobSize(image)))
       ThrowTIFFException(CorruptImageError,"InsufficientImageDataInFile");
     number_pixels=MagickMax(TIFFScanlineSize(tiff),MagickMax((ssize_t)
       image->columns*samples_per_pixel*pow(2.0,ceil(log(bits_per_sample)/