tools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width versus image width. Reported as MSVR 35103, aka cpStripToTile heap-buffer-overflow. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9540