CVE-2026-112395

The Pillow Python imaging library (versions 8.2.0 through 13.0.0 ) contains an out-of-bounds read vulnerability in its tiled-TIFF decoder . The issue occurs in the _decodeTile function because libtiff may return a tile allocation smaller than the required row stride multiplied by the tile length,...