BIT-pillow-2026-112395
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/pillow/BIT-pillow-2026-112395.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-pillow-2026-112395
- Aliases
- Published
- 2026-10-26T05:55:37Z
- Modified
- 2026-10-27T09:30:02Z
- Summary
- Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
- Details
-
Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy loop walks beyond that allocation. An attacker can supply a crafted tiled TIFF to an application that loads it. This can expose adjacent heap data in pixels or crash the process. This issue is fixed in version 13.0.0.
- Database specific
{ "cpes": [ "cpe:2.3:a:python:pillow:*:*:*:*:*:python:*:*" ], "severity": "High" }- References
Affected packages
Bitnami / pillow
Package
- Name
- pillow
- Purl
- pkg:bitnami/pillow
Severity
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator