An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tif_lzw.c. https://nvd.nist.gov/vuln/detail/CVE-2018-18661