···11+diff -rupN --no-dereference freeimage-svn-r1909-FreeImage-trunk/Source/FreeImage/PluginTIFF.cpp freeimage-svn-r1909-FreeImage-trunk-new/Source/FreeImage/PluginTIFF.cpp
22+--- freeimage-svn-r1909-FreeImage-trunk/Source/FreeImage/PluginTIFF.cpp 2023-09-28 19:34:47.713009853 +0200
33++++ freeimage-svn-r1909-FreeImage-trunk-new/Source/FreeImage/PluginTIFF.cpp 2023-09-28 19:34:48.043006563 +0200
44+@@ -2142,6 +2142,11 @@ Load(FreeImageIO *io, fi_handle handle,
55+ uint32_t tileRowSize = (uint32_t)TIFFTileRowSize(tif);
66+ uint32_t imageRowSize = (uint32_t)TIFFScanlineSize(tif);
77+88++ if (width / tileWidth * tileRowSize * 8 > bitspersample * samplesperpixel * width) {
99++ free(tileBuffer);
1010++ throw "Corrupted tiled TIFF file";
1111++ }
1212++
1313+1414+ // In the tiff file the lines are saved from up to down
1515+ // In a DIB the lines must be saved from down to up