CVE-2026-112396 | Pillow up to 12.x LibTIFF Encoding ImagingLibTiffEncode use after free

October 20, 2026 Yanac

A vulnerability identified as problematic has been detected in Pillow up to 12.x. This vulnerability affects the function ImagingLibTiffEncode of the component LibTIFF Encoding. This manipulation causes use after free.

This vulnerability is tracked as CVE-2026-112396. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More