CVE-2026-112902 | Pillow Tiff Encoder src/encode.c PyImaging_LibTiffEncoderNew information disclosure

October 22, 2026 Yanac

A vulnerability was found in Pillow. It has been rated as problematic. Affected by this issue is the function PyImaging_LibTiffEncoderNew of the file src/encode.c of the component Tiff Encoder. Performing a manipulation results in information disclosure.

This vulnerability is cataloged as CVE-2026-112902. It is possible to initiate the attack remotely. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More