CVE-2026-112897 | Pillow up to 12.x TIFF _decodeTile missing initialization

October 19, 2026 Yanac

A vulnerability was found in Pillow up to 12.x. It has been declared as problematic. Affected by this vulnerability is the function _decodeTile of the component TIFF Handler. Executing a manipulation can lead to missing initialization of a variable.

The identification of this vulnerability is CVE-2026-112897. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More