CVE-2026-112395 | python-pillow Pillow up to 12.x Tiled-TIFF Decoder _decodeTile out-of-bounds

October 19, 2026 Yanac

A vulnerability was found in python-pillow Pillow up to 12.x. It has been rated as critical. This impacts the function _decodeTile of the component Tiled-TIFF Decoder. Performing a manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2026-112395. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More