CVE-2026-112404 | python-pillow Pillow up to 12.99.99 TIFF Decode _decodeTile out-of-bounds

October 20, 2026 Yanac

A vulnerability labeled as critical has been found in python-pillow Pillow up to 12.99.99. This issue affects the function _decodeTile of the component TIFF Decode. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-112404. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More