Origin: https://src.fedoraproject.org/rpms/freeimage/blob/f39/f/CVE-2023-47997.patch diff -rupN --no-dereference freeimage-svn-r1909-FreeImage-trunk/Source/FreeImage/PluginTIFF.cpp freeimage-svn-r1909-FreeImage-trunk-new/Source/FreeImage/PluginTIFF.cpp --- freeimage-svn-r1909-FreeImage-trunk/Source/FreeImage/PluginTIFF.cpp 2024-03-10 14:22:18.669574426 +0100 +++ freeimage-svn-r1909-FreeImage-trunk-new/Source/FreeImage/PluginTIFF.cpp 2024-03-10 14:22:18.673574403 +0100 @@ -1435,6 +1435,12 @@ Load(FreeImageIO *io, fi_handle handle, (int)bitspersample, (int)samplesperpixel, (int)photometric); throw (char*)NULL; } + if (planar_config == PLANARCONFIG_SEPARATE && bitspersample < 8) { + FreeImage_OutputMessageProc(s_format_id, + "Unable to handle this format: bitspersample = 8, TIFFTAG_PLANARCONFIG = PLANARCONFIG_SEPARATE" + ); + throw (char*)NULL; + } // ---------------------------------------------------------------------------------