CVE-2026-112393 | python-pillow Pillow up to 12.x TIFF Processing _tiffWriteProc heap-based overflow

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x and classified as critical. The affected element is the function _tiffWriteProc of the component TIFF Processing. The manipulation results in heap-based buffer overflow.

This vulnerability was named CVE-2026-112393. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More