CVE-2026-128066

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

CVE-2026-128066: python-pillow Pillow: Pillow is a Python imaging library

Pillow is a Python imaging library. From 1.0 through 12.3.0, ImageFileDirectoryv2.load in src/PIL/TiffImagePlugin.py retains a separate bytes object for each out-of-line IFD tag value without limiting the total data read or preventing distinct tags from referencing the same file region. A small...

Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...

GHSA-WQGW-9XFH-QF2G Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data

============================================================================ ANT-2026-D7STJUWL medium CWE-770 dos Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data Location: src/PIL/TiffImagePlugin.py:927 in ImageFileDirectoryv2.load Commit: a707c6b21c313880d0771e54965d142dd42358b6...

CVE-2026-128066

The Pillow Python imaging library (versions 1.0 through 12.3.0) is vulnerable to a Memory Denial of Service (DoS) in the ImageFileDirectory_v2.load() function within src/PIL/TiffImagePlugin.py. The root cause is that the library retains a separate bytes object for each out-of-line IFD tag value w...