Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via crafted TIFF file.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-44427.json"