DailyCVE@dailycve
🟠 #Python, Out-of-Bounds Read, #CVE-2026-112395 (Moderate) -DC-Oct2026-3491 https://dailycve.com/python-out-of-bounds-read-cve-2026-112395-moderate-dc-oct2026-3491/
0000029
245 followersView on X
CVE-2026-112395
LOWCVSS 6.5 · MEDIUMImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-copy loop walks beyond that allocation. An attacker can supply a crafted tiled TIFF to an application that loads it. This can expose adjacent heap data in pixels or crash the process. This issue is fixed in version 13.0.0.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-122
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE