CVE-2026-112896 | python-pillow Pillow up to 12.x TIFF encoder out-of-bounds

October 19, 2026 Yanac

A vulnerability has been found in python-pillow Pillow up to 12.x and classified as problematic. This affects an unknown function of the component TIFF encoder. This manipulation causes out-of-bounds read.

This vulnerability is handled as CVE-2026-112896. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More